Re: [Taler] [CFRG] factoring integers by CVP and SVP algorithms

[Jeff Burdges]

There is at least one serious lattice guy, Leo Ducas, who thinks this does not 
hold up, so maybe shot down quickly..


> On 3 Mar 2021, at 20:17, Jeff Burdges <burdges@gnunet.org> wrote:
> We’ve some upcoming mathematical excitement for the next months or two folks 
> figure out if this is works and what it actually means.
> 
>> Begin forwarded message:
>> From: Thaddee Tyl <thaddee.tyl@gmail.com>
>> Subject: Re: [CFRG] factoring integers by CVP and SVP algorithms
>> Date: 3 March 2021 at 19:36:04 CET
>> To: Watson Ladd <watsonbladd@gmail.com>
>> Cc: "<cfrg@ietf.org>" <cfrg@ietf.org>
>> 
>>> The preprint is clearly incomplete and fragmentary, and a number of places 
>>> it's quite clear that things just don't work that way without more required 
>>> justification.
>> 
>> Claus Schorr mistakenly uploaded the wrong file, an outdated draft.
>> 
>> He just uploaded the newest file:
>> https://eprint.iacr.org/eprint-bin/getfile.pl?entry=2021/232&version=20210303:182120&file=232.pdf
>> 
>> It will surely undergo extreme scrutiny, as it does claim:
>> 
>>> This destroys the RSA cryptosystem.
> 
> Fun: https://twitter.com/matthew_d_green/status/1366952362053672964
> 
> 
> Taler could easily adopt blind Schnorr signatures because the aborts trick in 
> https://eprint.iacr.org/2019/877.pdf meshes with what the refresh protocol 
> does anyways, but withdrawals would then require a refresh-like preliminary 
> round.  
> 
> Jeff