3 ms·
R1 and R2 aren't reused. So you can't chain the attack to gain enough of an advantage.
by chipsa 7y ago
R1 and R2 aren't reused. So you can't chain the attack to gain enough of an advantage.
- amluto 7y agoMy attack doesn’t need reuse. It’s based on the fact that cheating the protocol has a success probability that falls off too slowly with the amount of cheating. This can be improved with multiple rounds. I’m not sure it’s possible, even in theory, to do better in a single round.