3 ms·
The "blind ECDSA" in that article is not an ECDSA signature at all. It's a blind schnorr signature. The article does not mention that the construction there (a
by nullc 9y ago
The "blind ECDSA" in that article is not an ECDSA signature at all. It's a blind schnorr signature.
The article does not mention that the construction there (and ones like it) are vulnerable to a one-more-signature attack if parallel queries are possible-- which is easily a fatal vulnerability in the headline digital cash application for blind signatures.