Abstract: A method of registering or authenticating a user with a relying party is provided, the method including: receiving a request to generate a key pair, the request including key-generation data, the key-generation data including relying party information; deterministically generating, based on at least the key-generation data and a secret key stored in a memory of the authenticator, a key pair comprising a public key and a private key; either: transmitting the public key, or performing further processing using the private key; and deleting the key pair. An authenticator configured to perform the process is also provided.

Abstract: The disclosure is related to a computer implemented method for assessing a dataset of integers, where the dataset previously is split into a plurality of subsets of the integers. In some embodiments, the integers are integer public keys for encryption or decryption. According to a first aspect, each subset in the dataset has a product data structure that is generated for the product of the integers in the subset. Each ordered pair of subsets has a remainder data structure for computing the factors of the integers in the subsets of the ordered pair. When one or more integers are to be added to the dataset, the disclosed method proposes that a subset is created to include the one or more integers be added. A product data structure is then generated for the created subset to obtain the product of the integer(s) in the created subset. Distinct ordered pairs of subsets comprising a subset from the dataset and the created subset are then identified.

Abstract: A method for obtaining a public-key digital signature for a data message (103) based on EdDSA, wherein the signature comprises a first data component (124) and a second data component (170). The method comprises receiving the first data component, a public key (114), a secret-integer (112), a secret-hash (122) and the data message, the first data component being an intermediate result of the EdDSA obtained from the secret-hash and the data message, wherein the secret-integer is derived from a part of a EdDSA private key (101). In different implementations, a first hash (141) and a second hash (151) are computed based on the first data component, the public key and the data message. The second data component is computed based on the first and second hash, the secret-integer, the secret-hash and a random value (161). The second data component is correct only if the first and second hashes are identical.