Subject: [CFRG] Comments on draft-irtf-cfrg-bls-signature-04: can we pick one?

From: Watson Ladd <[email-masked]>
Date: Mon, 2 Aug 2021 09:25:43 -0700

Dear all,

I'm concerned about presenting three different variants of
substantially the same scheme, with differing security properties. I'm
not entirely sure what the tradeoffs are between them, and not sure
why we couldn't just pick one.

The draft also doesn't mention the acceleration possible for
multipairing product evaluation: I think this would be useful for
implementors.

Sincerely,
Watson
-- 
Astra mortemque praestare gradatim