Re: [Cfrg] testability of signature input/output parameters

[Nico Williams <[e-mail]>]

On Thu, Jun 04, 2015 at 10:09:29AM -0400, Rene Struik wrote:
> [...]

It isn't possible to write test vectors for non-deterministic signature
schemes unless you expose PRNG state or nonce inputs as explicit
arguments to the API.  Regardless of whether one chooses to do that or
not, non-deterministic signature schemes whose security falls apart when
nonces are reused (or are predictable) is a really bad idea.

Anyways, we've already determined that we have consensus in favor of
deterministic signature schemes.  You could ask that that matter be
re-opened, but first re-read the threads that led there.

Nico
--