{"body":"So, propose the following security definition.\n\n\"Every ppt Algo A that outputs a pair of pairs ((m, R, S), w) and ((m*, R*, S*), w*) has a negligible probability that all the following are satisfied:\n 1) VERIFY(m, R, S) = 1 and\n 2) VERIFY(m*, R*, S*) = 1 and\n 3) w is a witness for signature S and\n 4) w* is a witness for signature S* and\n 5) one of the following mutually exclusive conditions is true:\n        (i)  \\texttt{LINK}((m, R, S), (m*, R^*, S*)) = 1 and w != w*, or\n        (ii) \\texttt{LINK}((m, R, S), (m*, R^*, S*)) = 0 and w = w*.\"","name":"","extension":"txt","url":"https://www.irccloud.com/pastebin/uJUqZ5mb","modified":1580932805,"id":"uJUqZ5mb","size":545,"lines":10,"own_paste":false,"theme":"","date":1580932805}