Cryptic thought of the day: A Chaum-Pedersen signature under PK g^s is just H(m)^s but, unlike a BLS signature, uses a Discrete Log Equality (DLEQ) proof for verification (instead of a pairing). Question: Is this what you would cite as an academic reference for DLEQ proofs?
[CP92] Wallet Databases with Observers; by Chaum, David and Pedersen, Torben Pryds; in Advances in Cryptology --- CRYPTO' 92; 1993
alin.apt
@alinush407
I put the "crypto" in "cryptocurrency" | Founding Team & Head of Cryptography at @AptosLabs