m1
and m2
) independently will generate 2 signatures (s1
and s2
). So:E(m1 XOR 0) = s1
E(m2 XOR 0) = s2
E(m1 XOR 0) = s31 = s1
E(m2 XOR s1) = s32
Administ
rator\00\00\00
rator\00\00\00 XOR s1
. This will generate E(m2 XOR s1 XOR 0)
which is s32.
now, you can use s32 as the signature of the full name Administrator.