cfrg/draft-irtf-cfrg-bls-signature

Issues

• Generalized fast subgroup checks and cofactor clearing for all pairing-friendly curves

  #52 opened 3 years ago by mratsim
  0

• keygen: explicitly allow application to specify salt

  #48 opened 3 years ago by kwantam
  1

• PoP scheme: recommendation for hash_pubkey_to_point serialization

  #49 opened 3 years ago by mratsim
  0

• Formal specification, testing and verification

  #47 opened 3 years ago by spitters
  5

• Support blind variant

  #37 opened 4 years ago by chris-wood
  9

• Proposals to fix BLS RFC v4's message binding security property

  #38 opened 3 years ago by cryptosubtlety
  27

• aggregate signatures and subgroup validation

  #33 opened 4 years ago by kwantam
  20

• Bit security level < 128

  #42 opened 4 years ago by veorq
  2

• Attacks and weaknesses of BLS aggregate signatures

  #39 opened 4 years ago by cryptosubtlety
  0

• Ambiguity in Proof of possession scheme

  #35 opened 4 years ago by dot-asm
  1

• Signing infinite point

  #34 opened 4 years ago by dot-asm
  1

• clarify that octets_to_point should be injective?

  #36 opened 4 years ago by kwantam
  1

• broken links

  #32 opened 4 years ago by kwantam
  4

• Question: is point at infinity signature valid for `Aggregate` inputs?

  #31 opened 4 years ago by hwwhww
  7

• Why use BLS over Schnorr in PopProve and PopVerify?

  #30 opened 4 years ago by burdges
  8

• Question: does `FastAggregateVerify` accept point of infinity PK (i.e., `SK=0`)?

  #27 opened 4 years ago by hwwhww
  10

• Backwards compatability of KeyGen

  #28 opened 4 years ago by CarlBeek
  4

• BLS v3 with hash-to-curve v7

  #22 opened 4 years ago by CarlBeek
  10

• Superfluous subgroup check on `PublicKey` in `FastAggregateVerify()`

  #24 opened 4 years ago by kirk-baird
  2

• KeyGen, weak keys, and interop

  #25 opened 4 years ago by kwantam
  21

• compression vs aggregation

  #7 opened 4 years ago by kwantam
  1

• remove indirection in section 2?

  #3 opened 4 years ago by kwantam
  1

• domain separation for KeyGen?

  #2 opened 4 years ago by kwantam
  1

• SK to PK function in API

  #11 opened 5 years ago by CarlBeek
  1

• Why SHA256 and not SHA3-256?

  #10 opened 5 years ago by valerini
  10

• Behaviour of `CoreAggregateVerify` and `FastAggregateVerify` with `length(PKs)==0`

  #16 opened 5 years ago by CarlBeek
  0

• Defining function arguments as arrays

  #17 opened 5 years ago by CarlBeek
  1

• Serialisation additional bits

  #18 opened 5 years ago by kirk-baird
  3

• optimizations: move to separate section?

  #4 opened 5 years ago by kwantam
  1

• Implementations that skip signature_subgroup_check

  #13 opened 5 years ago by JustinDrake
  2

• Clarify hash_pubkey_to_point domain separation tag

  #14 opened 5 years ago by JustinDrake
  0