At 11:51 PM 3/31/96 +0800, Chein-hsinLiu wrote:
Hi! I have some question about ecash protocol. In ecash protocol, we represent money by a sequence number which is signed by bank. And for privacy, we use blind signature. But when we send bank a pesudo sequence number-- X*PK(r) (X:sequence number we want, r :random number to cheat bank) then we can get SK(X*PK(r)) from bank, and get money by SK(X*PK(r))/r=SK(X). But if we divide SK(X*PK(r)) with r', we can get another money? It confuses me. How does it preserve the integrity of the money, and let people divide r on the SK(X*PK(r)) ?
The sequence number is not a sequence number, nor is it just any random number. It is a random number of some special form, so that the chance that the "other money" will be of this special form is remote. For example one might demand that every second hex digit was the number 7, and the other digits were random. When we divide a valid money number by r, we will not get another valid money number.
It confuses me very long time. Thanks for any help! Chein-hsin Liu 4/1/96
--------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd@echeque.com