[cryptography] Point compression prior art?
lodewijk andré de la porte
lodewijkadlp at gmail.com
Sat May 21 07:27:56 EDT 2011
Usage of the word rolling is also trademarked and limited.
You forgot about wheels that do not roll. Can't use that either.
You may have found some people using wheels for rolling. They should be
frowned upon, given extra-intimate pat-downs, blackmailed, arrested anyway,
made fun of before trial, given a long unfair trail, be non-lethally
tortured because they might know other "rollers" and later executed for
being a danger to the state beyond any help after which his familly will be
billed for all expenses (and exported).
On May 21, 2011 1:17 PM, "James A. Donald" <jamesd at echeque.com> wrote:
> On 2011-05-21 9:12 AM, Paul Crowley wrote:
>> On 20/05/11 23:49, Nico Williams wrote:
>>> What about using Shcnorr's signature scheme with ECDH? Here's DJB
>>> talking about it in the context of his Curve25519, which uses the
>>> discard-y point compression technique:
>>> This would seem adequate to me, and should result in small signatures.
>> I don't see how "discard y" works here. It works for DH because x(±yB) =
>> ±xyB = y(±xB). But for Schnorr the verifier needs sB-rnB and sB-rnB !=
>> sB-r(-nB). I guess it wouldn't be too expensive to try both - any
>> opinions on the patent status of that?
> I believe that the wheel is patented, as is the idea of trying to get
> around the patent by using something other than a wheel for the sort of
> purposes a wheel might be used for. Should someone ever figure how to
> make something other than a wheel roll, the idea of rolling non wheels
> is also patented.
> cryptography mailing list
> cryptography at randombit.net
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the cryptography