MathOverflow is a question and answer site for professional mathematicians. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm doing summer cryptography research and I am have been looking for a security analysis of the Guillou-Quisquater (GQ) digital signature scheme, but I have been unable to find one.

Since this is not a very common digital signature scheme I will mention the protocol.

GQ: Public: $n,e,I$ has function $H$, where $I \equiv S^{e} \mod n$

Private: $s$

Signature: $(x,y)$ where $x \equiv r^{e} \mod n, c=h(m,x)$, and $y \equiv rS^{c} \mod n$

To verify: Check that $y^{e} \equiv x I^{h(m,x)} \mod n$ (this works because $y^{e} \equiv (rS^{c})^{e} \equiv r^{e}S^{ce} \equiv xI^{c}$)

Any references to papers in which this could be found would be very helpful. Thank you!

share|cite|improve this question
I think your notation is inconsistent. Also, see the following:… – Steve Huntsman Jul 17 '12 at 21:16
@Steve Huntsman: Care to extrapolate upon your comment about the inconsistency of my notation? – Samuel Reid Jul 18 '12 at 7:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.