[Taler] Forking lemma

[Jeff Burdges]

We knew blind Schnorr signatures were broken, but actually the history is quite 
interesting there in that the random oracle model was miss-applied:

https://en.wikipedia.org/wiki/Forking_lemma#Known_issues_with_application_of_forking_lemma


There are two relevant broken links in that article:

http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.68.9836&rep=rep1&type=pdf

https://www.researchgate.net/profile/Claus_Schnorr/publication/2900710_Security_of_Blind_Discrete_Log_Signatures_against_Interactive_Attacks/links/54231e540cf26120b7a6bb47/Security-of-Blind-Discrete-Log-Signatures-against-Interactive-Attacks.pdf?origin=publication_detail

signature.asc
Description: Message signed with OpenPGP