Mod-Okamoto Demo Implementation
The proof of concept implementation of Okamoto-like Identification Scheme Resistant to Malicious Subliminal Setting of Ephemeral Secret, as of (doi:10.1145/3055259.3055267). The implementation uses WASM builds of the excellent MCL (https://github.com/herumi/mcl) pairing library.
Protocol Steps
Generator Q1 of G2
Generator Q2 of G2
P:
Q1:
Q2:
sk1 = a1,
sk2 = a2,
pk = a1Q1 + a2Q2
sk1 :
sk2 :
pk :
secret: x1,
secret: x1,
public: X = x1Q1 + x2Q2
x1 :
x2 :
X :
c
c :
U = H(X,c)
s1 = x1 + a1c
s2 = x2 + a2c
S1 = s1U
S2 = s2U
U :
s1 :
S1 :
s2 :
S2 :
e1 = e(S1, Q1)
e2 = e(S2, Q2)
e3 = e1 * e2
e4 = e(U, X + cA)
e3 :
e4 :
Result: