Claus-Peter Schnorr. “Efficient signature generation by smart cards.” Journal of Cryptology, 4(3):161–174, 1991.

Introduced the Schnorr identification protocol and signature scheme. The identification protocol is a three-message sigma protocol (commit–challenge–response) for proving knowledge of a discrete logarithm, and is honest-verifier zero-knowledge under the discrete logarithm assumption. Applying the Fiat-Shamir transform (heuristically in the random oracle model) yields Schnorr signatures, which are EUF-CMA secure under the discrete logarithm assumption in the ROM. Schnorr signatures are the basis for EdDSA (Ed25519) and play a central role in the Schnorr multi-signature and threshold signature literature.

BibTeX

Copy

@Article{JC:Schnorr91,
  author = {Claus-Peter Schnorr},
  title = {Efficient Signature Generation by Smart Cards},
  pages = {161--174},
  journal = {Journal of Cryptology},
  volume = {4},
  number = {3},
  month = {jan},
  publisher = {Springer},
  year = {1991},
  doi = {10.1007/BF00196725},
}