[Taler] Fwd: [CFRG] RSA blind signatures

[Jeff Burdges]

I just noticed this on the IRTF CFRG list: 

From: "Christopher Wood" <caw@heapingbits.net>

Subject: [CFRG] RSA blind signatures

Date: 23 February 2021 at 18:37:07 CET

To: cfrg@irtf.org

There are a growing number of use cases where we need something like VOPRFs but with public verifiability [1,2]. Given the results in 2020/945 [3], it seems prudent to try and fill the gap with something we know is reasonably safe. To that end, here's a draft describing RSA-based blind signatures:

  https://chris-wood.github.io/draft-wood-cfrg-blind-signatures/draft-wood-cfrg-rsa-blind-signatures.html

(I missed the deadline yesterday, so apologies for not having an actual datatracker draft to point at.)

Obviously, something better than RSA (in terms of bandwidth and overall messages) would be great. But it's not clear what that is right now.

Time permitting, I'd like to request some time on the agenda to present this to the group at IETF 110.

Thanks,
Chris

[1] https://github.com/ietf-wg-privacypass/base-drafts/issues/40
[2] https://github.com/privacycg/private-click-measurement/issues/27
[3] https://eprint.iacr.org/2020/945.pdf

_______________________________________________
CFRG mailing list
CFRG@irtf.org
https://www.irtf.org/mailman/listinfo/cfrg