|
|
|
@ -449,6 +449,8 @@ Bob waits to receive Alice's public nonce
|
|
|
|
|
essential: Bob must only give Alice the challenge scalar after Alice
|
|
|
|
|
has committed to her public nonce.
|
|
|
|
|
|
|
|
|
|
++++
|
|
|
|
|
<p class="fix_tracking">
|
|
|
|
|
The interactive identity protocol described here matches part of Claus
|
|
|
|
|
Schnorr's original description, but it lacks two essential features we
|
|
|
|
|
need for the decentralized Bitcoin network. The first of these is that
|
|
|
|
@ -464,6 +466,8 @@ disagreement with every other node that did authenticate it. That's not
|
|
|
|
|
acceptable for a consensus system like Bitcoin. For Bitcoin to work, we
|
|
|
|
|
need a protocol that doesn't require interaction between Alice and each
|
|
|
|
|
node that wants to authenticate her.
|
|
|
|
|
</p>
|
|
|
|
|
++++
|
|
|
|
|
|
|
|
|
|
A simple technique, known as the Fiat-Shamir transform after its
|
|
|
|
|
discoverers, can turn the schnorr interactive identity protocol
|
|
|
|
|