Modify the range of the sampled random in П^{enc}
?
#86
Labels
cryptography
Needs cryptographic expertise
Milestone
П^{enc}
?
#86
П^{enc}
(Fig. 14) prescribes samplingalpha
from[-2^(l+eps), 2^(l+eps)]
. Also takes an argumentk
in[-2^l, 2^l]
and generates the challengee
in[-q, q]
(whereq
is the curve order, withq < 2^l
). Then, on the verifier side one of the checks is ifalpha + e * k
is in[-2^(l+eps), 2^(l+eps)]
.Since
e
andk
are externally determined (by arguments to the proof), would it be safe to generatealpha
in a way that it won't fail that range check? That is, samplealpha
from[-2^(l+eps) - e * k, 2^(l+eps) - e * k]
instead?The text was updated successfully, but these errors were encountered: