Security and Communication Networks

Strong designated verifier signature scheme from lattices in the standard model

Geontae Noh, Ik Rae Jeong

Published Dec 1, 2016• 19 citations

Abstract

Abstract In a strong designated verifier signature scheme, only the designated verifier can determine the identity of the signer; others cannot identify the signer or the verifier. To date, one strong designated verifier signature scheme from lattices has been proposed, only in the random oracle model. In this paper, we propose the first strong designated verifier signature scheme from lattices in the standard model. The proposed scheme satisfies the requirements of unforgeability, nontransferability, and privacy of the signer's identity. This scheme can be easily extended to an identity‐based strong designated verifier signature scheme and an (identity‐based) strong multi‐designated verifiers signature scheme. Copyright © 2017 John Wiley & Sons, Ltd.

DOI: 10.1002/sec.1766

Related papers

Efficient and strongly unforgeable identity‐based signature scheme from lattices in the standard model

Zhenhua Liu, Yupu Hu, Xiangsong Zhang +1 more

ABSTRACT An identity‐based signature scheme from lattices is constructed. The scheme is obtained from a modification of Agrawal, Boneh, and Boyen's lattice identity‐based encryption scheme. In this construction, we use two distinct trapdoors for finding short bases. One trapdoor enables the real implementation to generate short bases for all lattices. The other trapdoor enables the simulator to generate short bases for all lattices. Furthermore, the generating short bases are used to sample short vectors as signatures. Our scheme is computationally efficient. The scheme's strong unforgeability is proven in the standard model and rests on the hardness of the small integer solution problem. Finally, we extend the basic construction to obtain a hierarchical identity‐based signature scheme. Copyright © 2012 John Wiley & Sons, Ltd.

Security and Communication NetworksMar 7, 201229 citations

ID-Based Strong Designated Verifier Signature over R -SIS Assumption

Jie Cai, Han Jiang, Pingyuan Zhang +4 more

In this paper, we propose an ID-based strong designated verifier signature (SDVS) over R - SIS assumption in the random model. We remove pre-image sampling function and Bonsai trees such complex structures used in previous lattice-based SDVS schemes. We only utilize simple rejection sampling to protect the security of our scheme. Hence, we will show our design has the shortest signature size comparing with existing lattice-based ID-based SDVS schemes. In addition, our scheme satisfies anonymity (privacy of signer’s identity) proved in existing schemes rarely, and it can resist side-channel attacks with uniform sampling.

Security and Communication NetworksJul 15, 20199 citations

A Lattice‐Based Identity‐Based Proxy Blind Signature Scheme in the Standard Model

Lili Zhang, Yanqin Ma

A proxy blind signature scheme is a special form of blind signature which allowed a designated person called proxy signer to sign on behalf of original signers without knowing the content of the message. It combines the advantages of proxy signature and blind signature. Up to date, most proxy blind signature schemes rely on hard number theory problems, discrete logarithm, and bilinear pairings. Unfortunately, the above underlying number theory problems will be solvable in the postquantum era. Lattice‐based cryptography is enjoying great interest these days, due to implementation simplicity and provable security reductions. Moreover, lattice‐based cryptography is believed to be hard even for quantum computers. In this paper, we present a new identity‐based proxy blind signature scheme from lattices without random oracles. The new scheme is proven to be strongly unforgeable under the standard hardness assumption of the short integer solution problem (SIS) and the inhomogeneous small integer solution problem (ISIS). Furthermore, the secret key size and the signature length of our scheme are invariant and much shorter than those of the previous lattice‐based proxy blind signature schemes. To the best of our knowledge, our construction is the first short lattice‐based identity‐based proxy blind signature scheme in the standard model.

Mathematical Problems in EngineeringJan 1, 201421 citations

LATTICE-BASED STRONG DESIGNATE VERIFIER SIGNATURE AND ITS APPLICATIONS

Fenghe Wang, Yupu Hu, Baocang Wang

Motivated by the need to have secure strong designate verifier signatures (SDVS) even in the presence of quantum computers, a post-quantum lattice-based SDVS scheme is proposed based on the hardness of the short integer solution problem (SIS) and the learning with errors problem (LWE). The proposed SDVS scheme utilizes the Bonsai trees and pre-image sample-able function primitives to generate the designate verifier signature (DVS). In this construction, the un- forge-ability is based on the hardness of the SIS problem which is proven in the random oracle model and the non-transferability is based on the hardness of the LWE problem. As an application of the proposed SDVS scheme, we design a strong designate verifier ring signature scheme (SDVRS) which satisfies non-transferability. It is proven that the identity of the signer is unconditionally protected not only for any third-party but also for the designate verifier. Under the hardness of the SIS problem, the proposed SDVRS scheme is proven to be existentially un-forgeable in the random oracle model.

Malaysian Journal of Computer ScienceMar 1, 201210 citations

Identity-based blind signature from lattices

Wen Gao, Yupu Hu, Baocang Wang +2 more

Blind signature allows a user to get a signature of a signer on an arbitrary message, and the verifier can convince that the signature is indeed signed by the signer without leaking any information about the message. This property is necessary when the user’s privacy needs protection, such as a bank bill, a trade secret, etc. As an alternative of public key infrastructure, the identity-based system can simplify the key management procedures in certificate-based public key systems. Inspired by the requirement of identity-based blind signature in the post quantum world, we research on identity-based blind signature based on hard lattice problems under the random Oracle model. We propose a construction built upon the blind signature by Rückert, and it is proved to be one-more unforgeable against selective identity and chosen message attacks (sID-CMA) and unconditionally blind. The proposed scheme has 2 moves, and its security can be reduced to the small integer solution (SIS) problem.

Wuhan University Journal of Natural SciencesJul 14, 20177 citations

Strongly Unforgeable Signatures and Hierarchical Identity-based Signatures from Lattices without Random Oracles.

Markus Rückert

Abstract. We propose a variant of the “bonsai tree ” signature scheme, a lattice-based existentially unforgeable signature scheme in the standard model. Our construction offers the same efficiency as the “bonsai tree” scheme but supports the stronger notion of strong unforgeability. Strong unforgeability demands that the adversary is unable to produce a new message-signature pair (m, s), even if he or she is allowed to see a different signature s ′ for m. In particular, we provide the first treeless signature scheme that supports strong unforgeability for the post-quantum era in the standard model. Moreover, we show how to directly implement identity-based, and even hierarchical identity-based, signatures (IBS) in the same strong security model without random oracles. An additional advantage of this direct approach over the usual generic conversion of hierarchical identity-based encryption to IBS is that we can exploit the efficiency of ideal lattices without significantly harming security. We equip all constructions with strong security proofs based on mild worst-case assumptions on lattices and we also propose concrete security parameters.

Jan 1, 20100 citations