Incorporating data into an ECDSA signature component

摘要

During generation of a signature on a message to create a signed message, a signer determines one of the signature components such that particular information can be extracted from the signature component. The particular information may be related to one or more of the signer and the message to be signed. After receiving a signed message purported to be signed by the signer, a verifier can extract the particular information from the signature component.

主权项

1. A non-transitory computer-readable storage medium containing computer-executable instructions which, when executed by a processor, result in the processor:
selecting particular information [VA] to be incorporated in a first signature component [r] of a signature on a message [M] to be signed; performing an iterative process of generating the first signature component [r] and applying a known function [F] to the first signature component [r], wherein the iterative process is repeated until applying the known function [F] to the first signature component [r] extracts the particular information [VA]; calculating a second signature component [s] of the signature from the first signature component [r], from a private key [kA], from a private integer value [dA], and from a message-dependent value that is dependent on the message [M]; and forming a signed message from the first signature component [r], from the second signature component [s], and from one of the message [M] and the message- dependent value.