|
|
|
@ -302,17 +302,17 @@ Provable security::
|
|
|
|
|
computers).
|
|
|
|
|
|
|
|
|
|
Linearity::
|
|
|
|
|
Schnorr signatures have a property that mathematicians call
|
|
|
|
|
Schnorr signatures have a property that mathematicians ((("linearity")))call
|
|
|
|
|
_linearity_, which applies to functions with two particular
|
|
|
|
|
properties. The first property is that summing together two or more
|
|
|
|
|
variables and then running a function on that sum will produce the
|
|
|
|
|
same value as running the function on each of the variables
|
|
|
|
|
independently and then summing together the results, e.g.,
|
|
|
|
|
+f(x + y + z) == f(x) + f(y) + f(z)+; this property is called
|
|
|
|
|
+f(x + y + z) == f(x) + f(y) + f(z)+; this property is((("additivity"))) called
|
|
|
|
|
_additivity_. The second property is that multiplying a variable and
|
|
|
|
|
then running a function on that product will produce the same value as
|
|
|
|
|
running the function on the variable and then multiplying it by the
|
|
|
|
|
same amount, e.g., +f(a * x) == a * f(x)+; this property is called
|
|
|
|
|
same amount, e.g., +f(a * x) == a * f(x)+; this property is ((("homogeneity of degree 1")))called
|
|
|
|
|
_homogeneity of degree 1_.
|
|
|
|
|
+
|
|
|
|
|
In cryptographic operations, some functions may be private (such
|
|
|
|
|