Łukasz Krzywiecki

Security of Okamoto Identification Scheme

2017

We consider the situation, where an adversary may learn the ephemeral values used by the prover within an identification protocol, aiming to get the secret keys of the user, or just to impersonate the prover …