On Sun, 15 Apr 2001, Faustine wrote:
certainly seems to have some interesting policy implications, particularly re. making the idea of forced key recovery obsolete. Any references to further papers or applications would be most welcome...thanks!
There was a cypherpunks discussion on "chaffing and winnowing without overhead" archived at http://www.inet-one.com/cypherpunks/dir.98.05.11-98.05.17/msg00087.html You can also find a paper by Bellare and Boldyreva "On The Security of Chaffing and Winnowing" http://www-cse.ucsd.edu/users/mihir/papers/cw.ps and the "Chaffinch" system which extends the idea to deal with forced disclosure of keys (RIP act): http://www.cl.cam.ac.uk/~rnc1/Chaffinch.html I seem to recall a paper with a title along the lines of "A Comment on Chaffing and Winnowing" in either Financial Cryptography or maybe Selected Areas in Cryptography, but I can't find it right now. -David