Talk:Verifiable random function
Appearance
![]() | Computing Stub‑class Low‑importance | |||||||||
|
BLS signatures are about the worst choice for a VRF for almost any realistic situation. Schnorr DLEQ proof based VRFs work well. RSA-FHD is not as fast as Rabin-Williams, but many Rabin variants are not VRFs. RSA-PSS is not a VRF and infinitely more common than RSA-FDH in the wild.