Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

Shorter Hash-and-Sign Lattice-Based Signatures

Thomas Espitau, Mehdi Tibouchi, Alexandre Wallet, Yang Yu

Published Jan 1, 2022• 39 citations
Publisher
DOI
10.1007/978-3-031-15979-4_9

Related papers

Blinding Post-Quantum Hash-and-Sign Signatures

Charles Bouillaguet, Thibauld Feneuil, Jules Maire +3 more

IEEE Symposium on Security and Privacy (S&P)•May 18, 2026•0 citations

Lattice-Based Sanitizable Signature Schemes: Chameleon Hash Functions and More

Sebastian Clermont, Samed Düzlü, Christian Janson +2 more

Lecture notes in computer science•Jan 1, 2025•3 citations

Shorter Lattice-Based Group Signatures via “Almost Free” Encryption and Other Optimizations

Vadim Lyubashevsky, Ngoc Khanh Nguyen, Maxime Plançon +1 more

Lecture notes in computer science•Jan 1, 2021•44 citations

Efficient forward secure identity-based shorter signature from lattice

Xiaojun Zhang, Chunxiang Xu, Chunhua Jin +1 more

Computers & Electrical Engineering•Jan 3, 2014•21 citations

Shorter and Faster Identity-Based Signatures with Tight Security in the (Q)ROM from Lattices

Éric Sageloli, Pierre Pébereau, Pierrick Méaux +1 more

Lecture notes in computer science•Jan 1, 2023•4 citations

Lattice-based identity-based ring signature without trapdoors

Lili Zhang, Zhongwen Li, Yongxuan Sang

So far, most ring signature schemes rely on hard number theory problems, such as discrete logarithm, bilinear pairings and so on. Unfortunately, the above underlying number theory problems will be solvable in the post quantum era. Lattice-based cryptography is a hotspot of research recently, due to its implementation simplicity and provable security reductions. When the hash-and-sign signature scheme was constructed based on the hardness of worst-case lattice problems, provably secure lattice-based ring signature schemes were finally constructed. However, the hash-and-sign ring signatures were rather inefficient (with megabytes long signatures). In this paper, we propose an alternative method for constructing lattice-based and identity-based ring signature scheme which does not use the hash-and-sign methodology. In the random oracle model, the proposed signature scheme based on the problem in general lattices is unforgeable and holds anonymity. Compared with the previous instantiations of the hash-and-sign ring signature schemes, the lengths of secret key, public key and signatures in the proposed scheme are much shorter. The signing algorithm is quite simple, with matrix-vector multiplications and rejection samplings.

International Journal of High Performance Computing and Networking•Jan 1, 2018•0 citations
So far, most ring signature schemes rely on hard number theory problems, such as discrete logarithm, bilinear pairings and so on. Unfortunately, the above underlying number theory problems will be solvable in the post quantum era. Lattice-based cryptography is a hotspot of research recently, due to its implementation simplicity and provable security reductions. When the hash-and-sign signature scheme was constructed based on the hardness of worst-case lattice problems, provably secure lattice-based ring signature schemes were finally constructed. However, the hash-and-sign ring signatures were rather inefficient (with megabytes long signatures). In this paper, we propose an alternative method for constructing lattice-based and identity-based ring signature scheme which does not use the hash-and-sign methodology. In the random oracle model, the proposed signature scheme based on the problem in general lattices is unforgeable and holds anonymity. Compared with the previous instantiations of the hash-and-sign ring signature schemes, the lengths of secret key, public key and signatures in the proposed scheme are much shorter. The signing algorithm is quite simple, with matrix-vector multiplications and rejection samplings.