Consider a variant of DSA in which the message space is Zq and H is omitted. (So the second comp

Name: Consider a variant of DSA in which the message space is Zq and H is omitted. (So the second component of the signature is now s = [k^-1 · (m + xr) mod q]) Show that this variant is not secure.
Uploaded: 2023-06-12T19:07:02-08:00
Duration: 3 min 49 s
Channel: Adi S
Description: Consider a variant of DSA in which the message space is Zq and H is omitted. (So the second component of the signature is now s = [k^-1 · (m + xr) mod q]) Show that this variant is not secure.

Question

Suman K · Accepted Answer

1. In the original DSA, the signature is a pair (r, s) where r = (g^k mod p) mod q and s = k^(-1

Question

Consider a variant of DSA in which the message space is Z_q and H is omitted. (So the second component of the signature is now s = [k^-1 · (m + xr) mod q]) Show that this variant is not secure.

Please give Ace some feedback