Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

ACM Transactions on Information and System Security

Verifiable encryption of digital signatures and applications

Giuseppe Ateniese

Published Feb 1, 2004• 96 citations
Publisher

Abstract

This paper presents a new simple schemes for verifiable encryption of digital signatures. We make use of a trusted third party (TTP) but in an optimistic sense, that is, the TTP takes part in the protocol only if one user cheats or simply crashes. Our schemes can be used as primitives to build efficient fair exchange and certified e-mail protocols.

DOI
10.1145/984334.984335

Related papers

Efficient and practical fair exchange protocols with off-line TTP

Feng Bao, Robert Huijie Deng, Wenbo Mao

We present protocols for fair exchange of electronic data (digital signatures, payment and confidential data) between two parties A and B. Novel properties of the proposed protocols include: 1) offline trusted third party (TTP), i.e., TTP does not take part in the exchange unless one of the parties behaves improperly; 2) only three message exchanges are required in the normal situation; 3) true fair exchange, i.e., either A and B obtain each other's data or no party receives anything useful; no loss can be incurred to a party no matter how maliciously the other party behaves during the exchange. This last property is in contrast to previously proposed protocols with offline TTP ([1] and [21]), where a misbehaving party may get another party's data while refusing to send his document to the other party, and the TTP can provide affidavits attesting to what happened during the exchange. To our knowledge, the protocols presented here are the first exchange protocols which use offline TTP and at the same time guarantee true fair exchange of digital messages. We introduce a novel cryptographic primitive, called the Certificate of Encrypted Message Being a Signature (CEMBS), as the basic building block of the fair exchange protocols. It is used to prove that an encrypted message is a certain party's signature on a public file, without revealing the signature. We also give two examples to show in detail how the certificate can be constructed.

IEEE Symposium on Security and Privacy (S&P)•Nov 27, 2002•295 citations

New scheme of fair exchange of digital signatures

Yu Shang

Based on the verifiably encrypted signature scheme without random oracles recently proposed by Gorantla et al.,a new scheme of optimistic fair exchange of digital signatures is proposed in this paper.The two players firstly exchange their verifiably encrypted signature on agreed-upon messages then their ordinary signature after the verification of each other's verifiably encrypted signature.If one of them executes the protocol dishonestly,the other can resort to a trusted third party so as to get the purpose of fair exchange of signatures.The proposed scheme has properties of short signature,low computation and verification cost.It can realize exchange of digital signatures fairly and efficiently.

Computer Engineering and Applications Journal•Jan 1, 2008•1 citation

An identity-based scheme of fair exchange of digital signatures

Yong Hong Yu, Bo Yang, Yang Guoqing

Fair exchange of digital signatures is an important tool for signing digital contracts, e-payment and other electronic commerce actions. An ID-based scheme of fair exchange of digital signature is proposed in this paper. The protocol relies on a trusted third party, but is “optimistic”, in that the third party is only needed in cases where one player attempts to cheat or simply crashes. The proposed scheme has properties of short signature, low computation and verification cost. It can realize exchange of digital signatures fairly and efficiently. A key feature of our scheme is that it is identity-based, which needs no certificates and has a simple key management. To our best knowledge, this is the first identity-based scheme of fair exchange of digital signatures.

Wuhan University Journal of Natural Sciences•Nov 1, 2006•3 citations

Certified e-Mail Protocol with Verifiable Third Party

Macià Mut–Puigserver, Josep Lluís Ferrer Gomila, Llorenç Huguet Rotger

Certified e-mail is a particular case of fair exchange. TTPs play an important role in this kind of protocols and their reliability and security is a problem that needs to be addressed. In order to enhance the trust in non-repudiation services we propose TTPs that provide verifiable services, so users get evidence of the TTPs operations. In this paper we design a new certified e-mail protocol where the user confidence on what is happening when he invokes the TTP is enhanced.

IEEE Conference on Commerce and Enterprise Computing (CEC)•Apr 12, 2005•12 citations

A New Protocol for Certified Mail Based on Off-line Conditional TTP

Shen Wei

Electronic mail delivery is one of the most important and desirable services, by which the intended recipient will get the mail if and only if the mail originator receives a valid and irrefutable proof of the receipt. The idea of conditional trusted third party has been developed on the basis of semi-trusted TTP and a suite of acceptable conditions is given. A new practical protocol for certified e-mail is presented, which can guarantee acceptable fair with interception of conditional TTP. More, the evidence in the new protocol is publicly verifiable without any restrictions on the type of signature and encryption algorithms.

Jisuanji gongcheng•Jan 1, 2004•0 citations

A New Fair Exchange Protocol Using Designated Confirmer Signatures

LU Song-nian

we propose a new efficient protocol. which allows a pair of potentially mistrusting parties to exchange digital signatures over the Internet in a fair way. The protocol relies on an off-line Trusted Third Party (TTP). which does not take part in the exchange unless any of the parties behaves improperly or other faults occur. Efficiency of the protocol is achieved by using a cryptographic primitive, called designated confirmer signatures. The confirmer commitment schemes and ordinary signatures are combines to form the confirmer signatures. The security of the protocol is analyzed and the fairness of it is guaranteed.

Jisuanji gongcheng•Jan 1, 2000•0 citations
This paper presents a new simple schemes for verifiable encryption of digital signatures. We make use of a trusted third party (TTP) but in an optimistic sense, that is, the TTP takes part in the protocol only if one user cheats or simply crashes. Our schemes can be used as primitives to build efficient fair exchange and certified e-mail protocols.
We present protocols for fair exchange of electronic data (digital signatures, payment and confidential data) between two parties A and B. Novel properties of the proposed protocols include: 1) offline trusted third party (TTP), i.e., TTP does not take part in the exchange unless one of the parties behaves improperly; 2) only three message exchanges are required in the normal situation; 3) true fair exchange, i.e., either A and B obtain each other's data or no party receives anything useful; no loss can be incurred to a party no matter how maliciously the other party behaves during the exchange. This last property is in contrast to previously proposed protocols with offline TTP ([1] and [21]), where a misbehaving party may get another party's data while refusing to send his document to the other party, and the TTP can provide affidavits attesting to what happened during the exchange. To our knowledge, the protocols presented here are the first exchange protocols which use offline TTP and at the same time guarantee true fair exchange of digital messages. We introduce a novel cryptographic primitive, called the Certificate of Encrypted Message Being a Signature (CEMBS), as the basic building block of the fair exchange protocols. It is used to prove that an encrypted message is a certain party's signature on a public file, without revealing the signature. We also give two examples to show in detail how the certificate can be constructed.
Based on the verifiably encrypted signature scheme without random oracles recently proposed by Gorantla et al.,a new scheme of optimistic fair exchange of digital signatures is proposed in this paper.The two players firstly exchange their verifiably encrypted signature on agreed-upon messages then their ordinary signature after the verification of each other's verifiably encrypted signature.If one of them executes the protocol dishonestly,the other can resort to a trusted third party so as to get the purpose of fair exchange of signatures.The proposed scheme has properties of short signature,low computation and verification cost.It can realize exchange of digital signatures fairly and efficiently.
Fair exchange of digital signatures is an important tool for signing digital contracts, e-payment and other electronic commerce actions. An ID-based scheme of fair exchange of digital signature is proposed in this paper. The protocol relies on a trusted third party, but is “optimistic”, in that the third party is only needed in cases where one player attempts to cheat or simply crashes. The proposed scheme has properties of short signature, low computation and verification cost. It can realize exchange of digital signatures fairly and efficiently. A key feature of our scheme is that it is identity-based, which needs no certificates and has a simple key management. To our best knowledge, this is the first identity-based scheme of fair exchange of digital signatures.
Electronic mail delivery is one of the most important and desirable services, by which the intended recipient will get the mail if and only if the mail originator receives a valid and irrefutable proof of the receipt. The idea of conditional trusted third party has been developed on the basis of semi-trusted TTP and a suite of acceptable conditions is given. A new practical protocol for certified e-mail is presented, which can guarantee acceptable fair with interception of conditional TTP. More, the evidence in the new protocol is publicly verifiable without any restrictions on the type of signature and encryption algorithms.
we propose a new efficient protocol. which allows a pair of potentially mistrusting parties to exchange digital signatures over the Internet in a fair way. The protocol relies on an off-line Trusted Third Party (TTP). which does not take part in the exchange unless any of the parties behaves improperly or other faults occur. Efficiency of the protocol is achieved by using a cryptographic primitive, called designated confirmer signatures. The confirmer commitment schemes and ordinary signatures are combines to form the confirmer signatures. The security of the protocol is analyzed and the fairness of it is guaranteed.