tzzL

z..:

.z:

C(

0 10 £ r 0 -n C’ S 0 t V I

L.

.

.2 -C I.

t 3 3

-*-

00

00

aC

...*

.V

£

.ci

-th

ç)C

’,

CF

‘.“

‘P-.

2H

.x

I:

S.-E

....

-I

5

IV

z n ‘C t 3 (S -t C :1’ i

-—-—

zuiz

zF

l *

‘—-C

— —-c

-

L1

—I-—J-iT

—

—

4_-

(4’fJ/ø;i)?tj/Uj=çsI

-

--“‘1j.—r-’—----

ic1“(U]TIçw)MSçWtNS)tSt

t1:(HSd)

:4+

dkanp)1d4S7]:•

I

.*S/)d,’?W’?‘TLflXLiTi(LI-U)vc

‘4:

IL,

tJWWJT%

___________

(css461A;csi+&444i4b#t

__

-—----‘--

It•,l—.14----——

—t

4-

— C1

E 31’t

- —

E LT

o n4

___

1F Lq))v’r semis Pg4J L1

® Aw&Versar obkns J 44&stseqenç

-

hit)

frI

-

0c- A1C5a,t$ c- dnfte. 4krt.

&nA m m .LapEend an

Let r=SrqnCsK11)ti,— r— 1 •

AJy L -

— rEj---.

anai’, f1 ?c’L.II11)m’s ELE. zr:,

&t jen%Jt, q4reqkk

t

- a-—i- I

4 -L

—

—

__

H HIr j •I

—4 _ r 4cL

__

I

I;

$JeMc is sitnj)jt secure N- aelvnry

€Ytñ tOcL’tLt. flew

vnesss,’e. t3rè was pre.vcov4 crs4 r:’’’ --

Tie. Aà1’ i..stv5 * tecy(Pk,m,o)trrwc

‘•tJ4

I -

4--

t -

- -

--

-

--

— —-9

- .--.f-

-

H-

- --4

t—.

• -

- j - I -

-

I- 4-

---I—

C,

‘I’

IS

I

a ‘p

*f

--

I— k--

T

4-‘1

Ij

+4

-

—4

1-

C—

.—

—

———

——

.44

—

—--

i.-,r

C4

—I_

——

——

•-

-:-

--

-

-r

+

-

1-,

—-

--4 —

C.J

——

—4.

—4.

I.

I—

——

—

)5

Lw

9— I A

U’ C I V t ‘lb -C t ti)

U’

C’

S U’ f

a a

n -2 IL I

cz1 p C..

•1 5 ft I.r

—-S t

5 $t-

’c$

,a

0 Sf

4%—

N3

.7 ftw

iti

-t—

4.S

-

-

I•-

—Sb

e •1’-

-or-t

3--U

’-

1I

3-

4-&In4JI’

4‘p

Fr

7-

-t“3

-iI‘0aml

‘I

toII

x0-

4--t•1C

-CciU’

-a-1

-14tCCI—

3—

’C—I

r4

-2’-c

4’

__!::

-cCLI-

Sa

-

4;

InI-)ISCr

-f.1-

2C

V.,

U1C3

1

C‘a

2£I£I

&

qj-J

£SVa.

II-n(0S

-I-

I

-:

?,

4II

-r

--

1—

—

--

--

I.1

-.

--

---

I—

4—

—

I—.t

HH

r

4—

—

—‘1

4—

—F

—

I

---ZI

tr

-

—1

--

--

ztL

.j

--

--

--

--4-

—

-31.

SS

—14

•••

—

•‘t’%%4‘vøjtMâtu*)

inchç,stua————————--—‘——-

)•it!..

flLi’.dj_——

-..——-—

•T.

.

—

-.

-,

—

-r

:çtvh)%iw(ju)qQt

:

S..;

WI

çynw)s..÷A:cs’u)L

cvçxw)A=çw).ç.4tso

T

—Zr-.;

‘3elIJ

————

i

1.............;

-h.

‘s(vfOu9rs(=çwp

L‘lbA

a

I.

-

c-,t-—rr--Nm, - —e-t -e, -,—--,-,n ,,_._.__)

-- -

• %)Q4%o4O

- PSS (wec.’$ e skcsà\y rn(vnjec*c

Wqnsk. 4 C1O%C%i w1est

‘rqnJo,n r4e noJ-4 Rs not

;r,vert;olc On

- -..-- - 4

----I — —- - —- --

— I

• •--F

÷

- -i—-E-z’

ZH** zL1H •J--- 1- -, t •

I i • I I

- I - - --1--I ;----1------ .- t-I--:

- —- I-— - -+ -

. •i_ •--,- — —: ——— •- - -— I •• — I

F-

- -- —I —-- -

I

—•

-_ ‘—-— •

1-

H

1:

1lI1.

—r—

——

F

4I

“1

:-}:::h

H-:

C

4C

-cft

4I—

—,

--

I.-V

4.

I

.1

t:

.n

4--n

4.II

H&

‘

3rU

rr4

4%

¶(I

LflQ

-;

.a...

tj

I-

—2

:

.

4

La.

!.

.1.

-‘

C..

—-w

*e

.-t

-.

.—

S%

6

•i1

U’

‘11:j;.

C;

II0

;-—

..1

IS

It‘

it

“-r

£f

I..

E&

c.

viIo

:f1

.

‘I

‘-C,4

tb&

0—

I’

‘aL

.‘I

ço

>.

—a

CCI—

‘A

——

-11

c-i

‘H

3€It

—---

TIa

-%

XIIaIsSi

rig-viC

cs-I“I

-x£S$4

‘S

Vi

-I‘CC—

44

-E

H—

-H

LI!

*HI•21.

‘I‘ft‘-I-

4-4

j-

••

4_J

4_I

—

I-—

--—

—-A

-

-

4I

--

I-‘

—-

—T

-c

—,

Ir

-—

—-4-

—.

4

4-1

.1-4’

4—

i-r4

4--4

-t

-

4-

4-

fli.

L

—-4--—

—-

--

—

1I

c1

,-

4-S

C-Se

tr-

tJ—

.

:J

C)

a

ii

‘a-al

Tp%

;r.-s

r”°”,‘F

II

1;H

i1L

,g—

S‘IF

I0c

‘4-‘A

—cb_

‘—F

%3J—1•

4’‘9

W%

_-H

‘A—

‘C-k

a)

1

‘—I

K_iri

I&

-

‘Il

1ttI

:t£

II0

IC—

.

‘r

÷E

rtE

jcs

t0

_I

p‘--‘

£a

It‘-.-‘

4-—

4)

—

r‘-

ES

.

r..

-.

.E..2’-

jj4

ss•

2?O

’-

j0

....i

- ._S

L

- -

--

• r1. tDE

9tfrc’ SCdjVI4iWt SiAt4

P-V1 9rmt

t0 te.nts

X4 5k

Y — & aiThk

It’ = 1C.° bks

kirio b;ts

laTh) b’t

Note: ii k is reused for different messages rn,one could solve for x so it is not secure.

If k is reused for the same m, we obtain thesame signature so this is not a problem. Jf k isdilferent for the same m, it should be randomand unknown (any knov relation betseen the

two k-s allows to solve for 4)

Sottomhne: All of the above are enforced by k =chosen at random from Z.qM for large enough q

(m.trx)/k (O6i’) It.o

* ro or 5=0

---4 -

iLn

L I79 a

t tjti3(qj4,r .nyonc’):

1oD41 a-

ktysen;

tttat 4- 34 A

kc- q (11e. Ik<N

C 0a p (n,oã ‘t?rn =

\rI= I ha-i

I

7— 4--

______JE I- _H-

::

:•:*

:

:r:

3r

—‘

r11

i1li

?}‘

-F

&-i..

(‘-

;-C

pI

It

;;r

I,I—

i-

I—

In3

!,r

...‘-...L

..C

33

0I

‘•1

Sc.

o—

“

-.

.-.-

-n

.—a—

-C2

-nA

-F

4.Y

•if.:

‘Cn,.

n—

——

--—

-----

£i’

—t

a.

4.-

_3

çj7

co

- -.....

...fl:[.i..

‘2‘

—a

71

--

sr

r-

4-_

U1%

__

_

.. .

.:f.

.::

.—

,-

LA—

-__.

•4.

‘1

——

..

.,%

_ø_

r.

-—-

-t-

rL

-H1

v-i-

L—

—

4- I I I H

v—H

II-

-I-

÷-i

— — .r--

I-+

I—-

—4