Here g is some fixed generator of a discrete log group. I don\'t want the group

Question

Here g is some fixed generator of a discrete log group. I don't want the group to be bilinear for efficiency and BDH-skepticism reasons.

Is anyone aware of a discrete log accumulator? What I mean specifically is some function f(x,A)?A? (that is, A is the accumulator value; f adds x to the accumulator, changing its value to A?) such that given (gx,A?) anyone can check whether x was placed in the accumulator.

So I'm roughly asking for an accumulator with the property that an accumulated element x has gx as a witness.

Explanation / Answer

Sure. Use the strong RSA assumption. The accumulator of x1,

Related Questions

Navigate

• Browse (All)
• Browse H
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.