Take the 2-minute tour ×
MathOverflow is a question and answer site for professional mathematicians. It's 100% free, no registration required.

I'm doing summer cryptography research and I am have been looking for a security analysis of the Guillou-Quisquater (GQ) digital signature scheme, but I have been unable to find one.

Since this is not a very common digital signature scheme I will mention the protocol.

GQ: Public: $n,e,I$ has function $H$, where $I \equiv S^{e} \mod n$

Private: $s$

Signature: $(x,y)$ where $x \equiv r^{e} \mod n, c=h(m,x)$, and $y \equiv rS^{c} \mod n$

To verify: Check that $y^{e} \equiv x I^{h(m,x)} \mod n$ (this works because $y^{e} \equiv (rS^{c})^{e} \equiv r^{e}S^{ce} \equiv xI^{c}$)

Any references to papers in which this could be found would be very helpful. Thank you!

share|improve this question
I think your notation is inconsistent. Also, see the following: scholar.google.com/… –  Steve Huntsman Jul 17 '12 at 21:16
@Steve Huntsman: Care to extrapolate upon your comment about the inconsistency of my notation? –  Samuel Reid Jul 18 '12 at 7:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.