1

Consider a variant of DSA in which the message space is $\mathbb Z_q$ and the hash function is replaced by the identity function. (So the second component of the signature is now $s := k^{−1} \cdot ( m + xr ) \mod q $). Show that this variant is not secure.

How would one go about this problem?

Bissi
  • 174
  • 6
badoo
  • 33
  • 3

0 Answers0