[52833] in Cypherpunks
Question about Blind Signature
daemon@ATHENA.MIT.EDU (Chein-hsinLiu)
Thu Mar 28 08:45:32 1996
Date: Thu, 28 Mar 1996 21:10:32 +0800
From: Chein-hsinLiu <r3506010@cml11.csie.ntu.edu.tw>
To: cypherpunks@toad.com
Hi!
I have some stupid question about how to implement blind signature.
I Know it works as follows:
If A wants B to sign X but donot know it is X, A can send
X*PK(random) : PK is public key of B
Then B signs on message:
SK(X*PK(random)) ==> SK(X)*random
Then A can obtain SK(X) by SK(X)*random/random
My question is when I see how RSA encrypts using PKCS
The PKCS block is like this
00 01 FF FF FF FF ... 00 input
Then SK(00 01 FF FF FF .. 00 input) .
If the input = X*PK(random)
then SK(00 01 FF FF FF .. 00 X*PK(random)) will not produce SK(X)*random
How to solve this??
Thanks!!
