Waters signatures ⇒ DS

Fully-black-box reduction · standard model · folklore · security loss: none

Statement

The Waters signature scheme is a digital signature scheme, with the same EUF-CMA advantage for every forger — folklore.