Talk:GMR (cryptography)

In contrast to RSA, GMR is secure against adaptive chosen-message attacks


 * AFAICT, this the same as existential forgery? If so, that should be pointed out. Arvindn 02:40, 3 May 2005 (UTC)


 * Nope it's not the same. 'Existential forgery' refers to the required outcome of the attack, while 'chosen message attack' refers to the powers of the adversary, i.e. that he can adaptively query a signing oracle. However the link is confusing, as it is encryption specific. There is a stub for signatures: Adaptive chosen-message attack, but it needs further work. Markulf 16:13, 20 August 2006 (UTC)