Re: [Cfrg] request for comments: ZSS Short Signature Scheme for SS and BN Curves

"Igoe, Kevin M." <> Thu, 04 April 2013 16:44 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 5DF6621F8D52 for <>; Thu, 4 Apr 2013 09:44:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -10.598
X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id 9Igu5dzf5Q3A for <>; Thu, 4 Apr 2013 09:44:21 -0700 (PDT)
Received: from ( []) by (Postfix) with ESMTP id 9AF3F21F8E4C for <>; Thu, 4 Apr 2013 09:44:20 -0700 (PDT)
X-TM-IMSS-Message-ID: <>
Received: from ([]) by ([]) with ESMTP (TREND IMSS SMTP Service 7.1; TLSv1/SSLv3 AES128-SHA (128/128)) id 5927ec4900293a5a ; Thu, 4 Apr 2013 12:43:21 -0400
Received: from ( by ( with Microsoft SMTP Server (TLS) id; Thu, 4 Apr 2013 12:44:19 -0400
Received: from ([]) by ([]) with mapi id 14.01.0289.001; Thu, 4 Apr 2013 12:44:18 -0400
From: "Igoe, Kevin M." <>
To: "" <>
Thread-Topic: [Cfrg] request for comments: ZSS Short Signature Scheme for SS and BN Curves
Thread-Index: Ac4lkatAl+acAzUUTfqTMjf28qdPGABju82wAousCJA=
Date: Thu, 4 Apr 2013 16:44:16 +0000
Message-ID: <>
References: <>
In-Reply-To: <>
Accept-Language: en-US
Content-Language: en-US
x-originating-ip: []
Content-Type: multipart/alternative; boundary="_000_3C4AAD4B5304AB44A6BA85173B4675CA8CBBFE8AMSMRGH1UEA03cor_"
MIME-Version: 1.0
Cc: "" <>
Subject: Re: [Cfrg] request for comments: ZSS Short Signature Scheme for SS and BN Curves
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Crypto Forum Research Group <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 04 Apr 2013 16:44:22 -0000

I've read over these drafts and find them interesting.  They use the ZSS Short Signature proposed
by Zhang, Safavi-Naini and Susilo in 2004, so the basic system has survived 9 years of scrutiny.
It  utilizes the mathematics that underpins identity based encryption, along the lines explored by
Sakai and Kasahara.

Note: I am a connoisseur of paring based cryptography, but not an expert.   (A connoisseur can treat
such  esoterica as Weil reciprocity (which is where I got stuck) as being a miracle and move on, an
expert cannot. Being a connoisseur is far, far easier than being an expert.)

I believe this is worthy of consideration by the CFRG.  The underlying mathematics is based on deep
results by some of the greatest 20th century mathematicians, so we can safely take that as being sound.
 The devil, as always, is in the implementation details.

From: [] On Behalf Of Laura Hitt
Sent: Friday, March 22, 2013 1:27 PM
Subject: [Cfrg] request for comments: ZSS Short Signature Scheme for SS and BN Curves

<my apologies if this was sent twice, I saw strange behavior on my end, so thought I'd try again.>

I have recently submitted (as an Individual) two I-Ds and would greatly appreciate any comments you are able to offer.  They pertain to the ZSS short signature scheme from bilinear pairings on supersingular elliptic curves and on Barreto-Naerhig elliptic curves.

Thank you!
Laura Hitt