Cryptography, Blind Signatures, Google, VPN, Privacy.
as passing, meaning they have unwittingly accepted the evil token! Using this approach, you could produce near-infinite evil tokens using just one honest token: just multiply the honest token by different constants, and tweak m' accordingly. Now why doesn’t this work? Moti pointed out to me