The paper by C.P. Schnorr introduces an efficient interactive identification scheme and a related signature scheme tailored for smart cards. These schemes are based on discrete logarithms and incorporate several novel features:
1. **Efficient Preprocessing**: An algorithm is proposed to pre-process the exponentiation of random numbers, significantly reducing the time required for signature generation and improving the efficiency of other discrete log-based cryptosystems. The preprocessing is based on local and internal randomization.
2. **Prime Modulus and Base**: The scheme uses a prime modulus \( p \) with a prime factor \( q \) of appropriate size (e.g., 140 bits) and a base \( \alpha \) such that \( \alpha^q \equiv 1 \pmod{p} \). All logarithms are calculated modulo \( q \). This results in signatures that are about 212 bits long, which is less than half the length of RSA and Fiat-Shamir signatures.
3. **Efficient Signature Generation**: The new scheme minimizes the computational load on the smart card, requiring only about 12 modular multiplications for signature generation, which can be performed during idle time. These multiplications are independent of the message or identification, making the process highly efficient.
4. **Security**: The security of the scheme relies on the one-way property of exponentiation \( y \rightarrow \alpha^y \pmod{p} \), assuming that discrete logarithms with base \( \alpha \) are difficult to compute. The preprocessing is secure due to information-theoretic arguments.
This scheme is particularly suitable for smart cards due to its low computational requirements and efficient preprocessing, making it a significant improvement over previous cryptosystems.The paper by C.P. Schnorr introduces an efficient interactive identification scheme and a related signature scheme tailored for smart cards. These schemes are based on discrete logarithms and incorporate several novel features:
1. **Efficient Preprocessing**: An algorithm is proposed to pre-process the exponentiation of random numbers, significantly reducing the time required for signature generation and improving the efficiency of other discrete log-based cryptosystems. The preprocessing is based on local and internal randomization.
2. **Prime Modulus and Base**: The scheme uses a prime modulus \( p \) with a prime factor \( q \) of appropriate size (e.g., 140 bits) and a base \( \alpha \) such that \( \alpha^q \equiv 1 \pmod{p} \). All logarithms are calculated modulo \( q \). This results in signatures that are about 212 bits long, which is less than half the length of RSA and Fiat-Shamir signatures.
3. **Efficient Signature Generation**: The new scheme minimizes the computational load on the smart card, requiring only about 12 modular multiplications for signature generation, which can be performed during idle time. These multiplications are independent of the message or identification, making the process highly efficient.
4. **Security**: The security of the scheme relies on the one-way property of exponentiation \( y \rightarrow \alpha^y \pmod{p} \), assuming that discrete logarithms with base \( \alpha \) are difficult to compute. The preprocessing is secure due to information-theoretic arguments.
This scheme is particularly suitable for smart cards due to its low computational requirements and efficient preprocessing, making it a significant improvement over previous cryptosystems.