When I posted about RSAL in my last post I was also thinking of a variant scheme that allows some pre-computation. I spent some time (minutes) evaluating its security and now I’m convinced that it’s secure :). Here it is: The RSALX Digital signature Scheme PrecomputeSign() →< A, a, t1, … , t2^d > Chose […]