Re: [Cfrg] Elliptic Curves - signature scheme: randomised or not (ends on May 13th)

[Ilari Liusvaara <[e-mail]>]

On Sun, May 03, 2015 at 12:14:53PM +0100, Alexey Melnikov wrote:
 
> To determine the way forward, we are going to conduct a poll to determine
> how we should tackle the question of de-randomisation. Please pick one of
> the
> options specified below:
> 
> 1. CFRG should stick to randomised signature schemes only.
> 
> 2. CFRG should adopt deterministic signature scheme only.
> 
> 3. De-randomisation should be an optional feature for implementers to
> decide upon (i.e. both choices 1 and 2 allowed).

2. Deterministic only.

Basically, ECC signatures explode if one so much as looks at it wrong.
Thus, proper testing is really important, and that is only possible
for fully deterministic algorithms.


Some notes:
- Adding external tweak input does not break determinism.
- For "coupon" generation, derandomization can be used to provode nonce
  input instead of cryptoglycerin input.



-Ilari