AMP. AMP+ perturbs the structural similarity between G2 = g(x+ )y and = = g(x+e)y. The di erence in protocol setup is to set $ = (x + ) 1(x + e2) mod q. The main di erence in protocol run is that both parties compute e1 such that e1 = h2(G1; id; ▇▇▇▇▇; ▇▇▇). We set $ = (xe1 + ) 1(x + e2) mod q. The randomness of e1 is totally dependent upon that of G1
Appears in 2 contracts
Sources: Authentication and Key Agreement Protocol, Authentication and Key Agreement Protocol