Re: Chaumian blinding in ECC and ElGamal?

James A. Donald (jamesd@echeque.com)
Mon, 08 Feb 1999 08:13:11 -0800

• Next message: James A. Donald: "Re: Chaumian blinding in ECC and ElGamal?"
• Previous message: Mike Rosing: "Re: Chaumian blinding in ECC and ElGamal?"
• In reply to: Lucky Green: "Chaumian blinding in ECC and ElGamal?"

    --
On Mon, 8 Feb 1999, Lucky Green wrote:
>> I am told that one can do Chaumian blinding of electronic cash coins not
>> only using RSA, but also using ECC or DH/ElGamal. Would somebody here be so
>> kind and show me exactly how this would be done?

At 09:15 AM 2/8/99 -0600, Mike Rosing wrote:
>I've done the math for Brands digicash in ECC. I suspect it's as simple
>to do for Chaums version.

It is not:

Chaum uses RSA, not discrete log, as his one way operation, and thus does
not translate directly to ECC, unlike Brand.

    --digsig
         James A. Donald
     6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG
     /GsW1TgtfdXUom/Vlljy4A7S3uMXVfS9Vu0FCdhL
     43deGE2LF4Xc1rsGdBBbEKngbRC1AygwlZm+hN7P6

-----------------------------------------------------
We have the right to defend ourselves and our property, because
of the kind of animals that we are. True law derives from this
right, not from the arbitrary power of the omnipotent state.

http://www.jim.com/jamesd/      James A. Donald

• Next message: James A. Donald: "Re: Chaumian blinding in ECC and ElGamal?"
• Previous message: Mike Rosing: "Re: Chaumian blinding in ECC and ElGamal?"
• In reply to: Lucky Green: "Chaumian blinding in ECC and ElGamal?"