diff options
author | Jeff Burdges <burdges@gnunet.org> | 2016-05-02 10:10:29 +0200 |
---|---|---|
committer | Jeff Burdges <burdges@gnunet.org> | 2016-05-02 10:10:29 +0200 |
commit | dafef04c60bb26670139ea9767d026dcda234893 (patch) | |
tree | 97d01001f8842dd2b3ed876952493679c2b911ad /doc/paper/postquantum_melt.tex | |
parent | d1c83c5dda2f40578f18ce01ce0c7e1c6e311919 (diff) | |
download | exchange-dafef04c60bb26670139ea9767d026dcda234893.tar.xz |
Small Ring-LWE comments
Diffstat (limited to 'doc/paper/postquantum_melt.tex')
-rw-r--r-- | doc/paper/postquantum_melt.tex | 18 |
1 files changed, 13 insertions, 5 deletions
diff --git a/doc/paper/postquantum_melt.tex b/doc/paper/postquantum_melt.tex index 5d93e58e0..455f03d15 100644 --- a/doc/paper/postquantum_melt.tex +++ b/doc/paper/postquantum_melt.tex @@ -342,9 +342,9 @@ pay to withdraw it. \subsection{Withdrawal}\label{subsec:withdrawal} In Taler, we may address tax fraud on initial withdrawal by turning -withdrawal into a refresh from a pseudo-coin $(C,\Mu)$ consisting of - the user's reserve key \cite[??]{Taler} and - a post-quantum public key $\Mu$. +withdrawal into a refresh from a pseudo-coin $(C,\Mu)$ in which + $C$ is the user's reserve key \cite[??]{Taler} and + $\Mu$ s a post-quantum public key kept with $C$. We see below however that our public key algorithm has very different security requirements in this case, impacting our algorithm choices. @@ -485,8 +485,16 @@ refreshing change. \section{Hash and Ring-LWE hybrid} -We noted above in \S\ref{subsec:withdrawal} that exchange might -require a refresh-like operation when coins are initially withdrawn. +We noted in \S\ref{subsec:withdrawal} above that exchange might +require that initial withdrawals employs a refresh-like operation. +In this scenarion, we refresh from a pseudo-coin $(C,\Mu)$ where + $C$ is the user's reserve key \cite[??]{Taler} and + $\Mu$ s a post-quantum public key kept with $C$. +As a result, our hash-based scheme should increase the security +paramater $\delta$ to allow a query for every withdrawal operation. + +Instead, we propose using a Merkle tree of Alice side Ring-LWE keys, +while continuing to invent the Bob side Ring-LWE key. ... % Use birthday about on Alice vs Bob keys |