Cryptography, Blind Signatures, Google, VPN, Privacy.
(privkey) Redemption point knows: m_2, sig(h(m_2)) Everyone knows: e (pubkey) Solve for r: BM_1 = h(m_1) * r_1^e mod N Divide by h(m_2): BM_1 / h(m_2) = h(m_1) * r_1^e / h(m_2) mod N Raise by privkey d: (BM_1 / h(m_2))^d = (h(m_1)/h(m_2))^d * r_1 mod N = r' Notice how in the original attack, when