Talk:Verifiable random function

BLS signatures are about the worst choice for a VRF for almost any realistic situation. Schnorr DLEQ proof based VRFs work well. RSA-FHD is not as fast as Rabin-Williams, but many Rabin variants are not VRFs. RSA-PSS is not a VRF and infinitely more common than RSA-FDH in the wild. — Preceding unsigned comment added by 188.62.22.15 (talk) 17:44, 7 February 2020 (UTC)

This should probably mention the "BADA55" criticisms of the VRF concept. i.e. [] Wonderstruck (talk) 04:38, 4 January 2021 (UTC)

Absolutely nothing on the BADA55 site discusses VRFs. It's talking about curves parameter choice, a totally unrelated idea. — Preceding unsigned comment added by 37.164.12.238 (talk) 06:50, 13 January 2022 (UTC)