A PROVABLE SECURE VARIANT OF THE EDDSA DIGITAL SIGNATURE SCHEME

215 views

Abstract

This paper proposes a digital signature scheme, called R-EdDSA scheme, which is a randomized variant of the EdDSA scheme. Assuming the hash function H is modelled as a random oracle and the elliptic curve discrete logarithm problem is hard, we prove that the R-EdDSA digital signature scheme is existentially unforgeable under an adaptive chosen message attacks.