Maybe. But why would you try that when you can just not use signatures, which were the wrong tool in the first place? My point is that you usually need less c

Maybe. But why would you try that when you can just not use signatures, which were the wrong tool in the first place? My point is that you usually need less crypto, not more. Trying to fix fundamental problems by tacking on more crypto might make a protocol more secure, but it definitely will make the protocol harder to analyze, which makes it harder to find problems.