文档介绍：求和/平均值
一群人怎样才能计算出他们的平均薪水，而又不让任何人知道其他人的薪水呢？
Alice在她的薪水上加一个秘密随机数，然后把它送给Bob
Bob把他的薪水加上，并把它送给Carol。
Carol把她的薪水相加，并把它送给Dave。dization project for public-key cryptography. It includes specifications for:
* Traditional public-key cryptography (IEEE Std 1363-2000 and 1363a-2019)
* Lattice-based public-key cryptography ()
* Password-based public-key cryptography ()
* Identity-based public-key cryptography using pairings ()
1363/a
the underlying computationally difficult problem:
discrete logarithm in the group of remainders modulo a prime (DL)
discrete logarithm in the group of points on an elliptic curve over a finite field (EC)
integer factorization (IF)
For the DL family, the standard will include:
Diffie-Hellman key agreement allowing up to two key pairs from each party
Menezes-Qu-Vanstone key agreement, which requires two key pairs from each party
DSA Signatures, with SHA-1 and RIPEMD-160 as hash functions
Nyberg-Rueppel Signatures with appendix, with SHA-1/ RIPE-160 as hash functions
For the EC family, the standard will mirror the DL family;
For the IF family, the standard:
RSA encryption with Optimal Asymmetric Encryption Padding (OAEP)
RSA signature with appendix using a hash function and ANSI padding
Rabin-Williams (even exponent) equivalents of the above RSA signatures
IEEE will specify cryptographic techniques based on hard problems over lattices.
It is also intended that provide a second-generation framework for the description of cryptographic techniques, as compared to the initial framework provided in 1363-2000 and draft P1363a.
It is not the purpose of this project to mandate any particular set of public-key techniques or security requirements (including key sizes) for this or any family.
Rather, the purpose is to provide:
a reference for specification of a variety of techniques from which applications may select,
the relevant number-theoretic background, and
extensive discussion