View Single Post
Old 2021-01-27, 16:46   #1782
James Heinrich
James Heinrich's Avatar
"James Heinrich"
May 2004
ex-Northern Ontario

22×839 Posts

Originally Posted by axn View Post
No. P95 calculates 3^(Mp+1) == 3^(f+1) to prp test Mp/f. So the residue produced is always the same.
By calculating 3^(Mp+1), you can just do repeated squaring (more efficient), which also allows GEC / CERT capability.
Does this mean one could fake the residue for a PRP test with a different number of cofactors (trivial, it's always the same), but one would not be able to (so easily) fake the proof?
James Heinrich is offline   Reply With Quote