Answers are grounded in this paper and cite their sources.
In this paper we present a modification of the DSA which allows signatures with message recovery. The new public key signature scheme is then applied to create (a) an identity-based public key system without restrictions in trust and (b) a one-pass key exchange protocol with mutual authentication.
No takes yet. Share an insight, caveat, or question.
Nyberg et al. (1993) studied this question.