From 239f1f246b03980a3adfc9198ae1109b86bc2f41 Mon Sep 17 00:00:00 2001 From: Jeff Burdges Date: Mon, 7 Jan 2019 03:32:44 +0100 Subject: [PATCH] slothful reduction --- keys/3-session.md | 1 + 1 file changed, 1 insertion(+) diff --git a/keys/3-session.md b/keys/3-session.md index 00c6099..c30b3df 100644 --- a/keys/3-session.md +++ b/keys/3-session.md @@ -20,3 +20,4 @@ We include the recent block hash in the certificate, so that if the chain were t We still lack any wonderful aggregation strategy for block production VRFs, so they may default to Ristretto Schnorr VRFs. In this case, the Ristretto Schnorr session key component living longer also help minimize attacks on our random beacon. +We should consider [slothful reduction](https://eprint.iacr.org/2017/437) as discussed in https://github.com/zkcrypto/pairing/issues/98 since GRANDPA uses the small curve key form.