The original protocol has to be what's called public coin, which means that all the verifier does is just toss random coins and tell the results of the poover. If you apply Fiatramiou to them, no matter what hash function you use, the result is going to be insecure. In theory land, we are somewhat unhappy with this random Oracle situation. We would like to base things on standard model. Can we do it based on discrete log or factory or something concrete? Why do you dislike the random Oracle model?

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode