3 ms·
Certain signing algorithms such as ed25519 do not depend on the collision resistance of the hash function when signing the message. They do however when signing
by h_anna_h 5y ago
Certain signing algorithms such as ed25519 do not depend on the collision resistance of the hash function when signing the message. They do however when signing the hash.
"It's always signing a hash.", sure, but S(m) and S(h(m)) is a different operation with very different properties.