Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

Probabilistic Hash-and-Sign with Retry in the Quantum Random Oracle Model

Haruhisa Kosuge, Keita Xagawa

Published Jan 1, 2024• 9 citations
Publisher
DOI
10.1007/978-3-031-57718-5_9

Related papers

Leighton-Micali Hash-Based Signatures in the Quantum Random-Oracle Model

Edward Eaton

Lecture notes in computer science•Dec 22, 2017•18 citations

The Security of Hash-and-Sign with Retry Against Superposition Attacks

Haruhisa Kosuge, Keita Xagawa

Lecture notes in computer science•Jan 1, 2025•0 citations

Signatures with Memory-Tight Security in the Quantum Random Oracle Model

Keita Xagawa

Lecture notes in computer science•Jan 1, 2024•3 citations

Tighter Quantum Security for Fiat-Shamir-with-Aborts and Hash-and-Sign-with-Retry Signatures

Pouria Fallahpour, S. (Serge) Fehr, Y.H. (Yu-Hsuan) Huang

Lecture notes in computer science•Jan 1, 2026•1 citation

Security notions for the random oracle model in classical and quantum settings

Jeeun Lee, Seunghyun Lee, Kwangjo Kim

•Jan 25, 2018•1 citation

Lattice-based identity-based ring signature without trapdoors

Lili Zhang, Zhongwen Li, Yongxuan Sang

So far, most ring signature schemes rely on hard number theory problems, such as discrete logarithm, bilinear pairings and so on. Unfortunately, the above underlying number theory problems will be solvable in the post quantum era. Lattice-based cryptography is a hotspot of research recently, due to its implementation simplicity and provable security reductions. When the hash-and-sign signature scheme was constructed based on the hardness of worst-case lattice problems, provably secure lattice-based ring signature schemes were finally constructed. However, the hash-and-sign ring signatures were rather inefficient (with megabytes long signatures). In this paper, we propose an alternative method for constructing lattice-based and identity-based ring signature scheme which does not use the hash-and-sign methodology. In the random oracle model, the proposed signature scheme based on the problem in general lattices is unforgeable and holds anonymity. Compared with the previous instantiations of the hash-and-sign ring signature schemes, the lengths of secret key, public key and signatures in the proposed scheme are much shorter. The signing algorithm is quite simple, with matrix-vector multiplications and rejection samplings.

International Journal of High Performance Computing and Networking•Jan 1, 2018•0 citations
So far, most ring signature schemes rely on hard number theory problems, such as discrete logarithm, bilinear pairings and so on. Unfortunately, the above underlying number theory problems will be solvable in the post quantum era. Lattice-based cryptography is a hotspot of research recently, due to its implementation simplicity and provable security reductions. When the hash-and-sign signature scheme was constructed based on the hardness of worst-case lattice problems, provably secure lattice-based ring signature schemes were finally constructed. However, the hash-and-sign ring signatures were rather inefficient (with megabytes long signatures). In this paper, we propose an alternative method for constructing lattice-based and identity-based ring signature scheme which does not use the hash-and-sign methodology. In the random oracle model, the proposed signature scheme based on the problem in general lattices is unforgeable and holds anonymity. Compared with the previous instantiations of the hash-and-sign ring signature schemes, the lengths of secret key, public key and signatures in the proposed scheme are much shorter. The signing algorithm is quite simple, with matrix-vector multiplications and rejection samplings.