Content deleted Content added
→Construction: Fixed semantic mistake. A commitment scheme can (and must) be binding and hiding, it just can't do both perfectly. Tags: Mobile edit Mobile web edit |
|||
Line 45:
===Signature schemes===
The [Lamport signature]] scheme is a [[digital signature]] system that relies on maintaining two sets of secret data packets, publishing [[Cryptographic hash function|verifiable hashes]] of the data packets, and then selectively revealing partial secret data packets in a manner that conforms specifically to the data to be signed. In this way, the prior public commitment to the secret values becomes a critical part of the functioning of the system.
Because the [[Lamport signature]] system cannot be used more than once (see the [[Lamport signature|relevant article]] for details), a system to combine many Lamport Key-sets under a single public value that can be tied to a person and verified by others was developed. This system uses trees of [[Cryptographic hash function|hashes]] to compress many published lamport-key-commitments sets into a single hash value that can be associated with the prospective author of later verified data.
| |||