On the Security of Lenstra's DSA Variant

Vaudenay, Serge2007-01-192007-01-192007-01-191996https://infoscience.epfl.ch/handle/20.500.14299/239823At the Asiacrypt'96 Conference, Lenstra presented a DSA variant which offers some workload advantage for the signer. In this paper, we show some instances of it are not secure unless special care is taken.On the Security of Lenstra's DSA Varianttext::conference output::conference presentation