2

Is it possible to implement blind signatures with purely hash-based signature algorithms?

Any whitepapers, code samples, etc on the subject would be helpful.

CoryG
  • 589
  • 3
  • 11

2 Answers2

2

Till today, there is no known construction for this. The problem is that standard hash functions do not come with the necessary algebraic properties required for blinding and unblinding.

mephisto
  • 2,968
  • 20
  • 29