The rise of quantum computing threatens to break many of the cryptographic systems that secure today’s digital world. In response, researchers are developing new tools designed to remain secure in a post-quantum future. Most of the promising candidates for post-quantum digital signatures rely on security assumptions based on lattices or properties of hash functions. Another promising approach transforms secure multi-party computation protocols into zero-knowledge proofs, which are then turned into digital signatures. This technique, known as multi-party computation in-the-head (MPCitH), offers strong security properties and flexibility for distributed applications. This thesis investigates whether MPCitH digital signatures can be efficiently adapted for use by two cooperating parties to jointly produce a signature. Here we show how to construct two-party signatures based on syndrome decoding in-the-head (SDitH) signatures. We propose a provably secure scheme that achieves the smallest known communication overhead among two-party MPCitH signatures, while resulting in a signature size approximately double that of a single-prover variant. This result provides a new data point in the design space of multi-party MPCitH signatures and post-quantum digital signatures in general.
The rise of quantum computing threatens to break many of the cryptographic systems that secure today’s digital world. In response, researchers are developing new tools designed to remain secure in a post-quantum future. Most of the promising candidates for post-quantum digital signatures rely on security assumptions based on lattices or properties of hash functions. Another promising approach transforms secure multi-party computation protocols into zero-knowledge proofs, which are then turned into digital signatures. This technique, known as multi-party computation in-the-head (MPCitH), offers strong security properties and flexibility for distributed applications. This thesis investigates whether MPCitH digital signatures can be efficiently adapted for use by two cooperating parties to jointly produce a signature. Here we show how to construct two-party signatures based on syndrome decoding in-the-head (SDitH) signatures. We propose a provably secure scheme that achieves the smallest known communication overhead among two-party MPCitH signatures, while resulting in a signature size approximately double that of a single-prover variant. This result provides a new data point in the design space of multi-party MPCitH signatures and post-quantum digital signatures in general.
Public key cryptography plays a pivotal role in maintaining digital security and privacy, with its foundations built on the hardness of certain mathematical problems. However, the emergence of quantum computing threatens the security of current cryptographic systems, making the adoption of post-quantum cryptography (PQC) an urgent necessity. Digital signature schemes are essential components in secure communications, providing authentication, non-repudiation, and data integrity. This paper examines the state of post-quantum digital signature schemes across various cryptographic approaches, including lattice-based, code-based, multivariate polynomial-based, hash-based, symmetric-key-based, and isogeny-based systems, alongside advancements in Multi-Party Computation in the Head (MPC-in-the-head) schemes. The paper then explores application-specific signatures such as blind, undeniable, threshold, chameleon, aggregate, and ring signatures, explaining their main use cases and the existing post-quantum cryptographic classifications that support these constructions individually. Software implementations of selected prominent PQC digital signature schemes were carried out, and their performance was systematically analysed using metrics such as bandwidth consumption, latency, and computational efficiency. These results provide key observations regarding the suitability of different schemes for both resource-constrained and high-performance environments. Subsequently, a detailed literature review of implementations on embedded and hardware platforms is presented, focusing on ARM-based devices and FPGA accelerators to evaluate deployment feasibility beyond general-purpose processors. Based on the software and implementation-level findings, a comparative analysis across software, embedded, and hardware platforms is conducted to highlight architectural influences on performance, scalability, and practicality. Furthermore the cryptanalytic attacks on post-quantum digital signature schemes across various PQC classifications are examined in this paper, taking into account both classical and quantum adversarial models. To evaluate realistic security constraints, implementation-oriented vulnerabilities such as side-channel and fault-based attacks are also examined. In addition, the applicability of post-quantum digital signature schemes within TLS, IoT, and related practical deployment scenarios is analysed. The study also discusses possible directions for further investigation, focusing on the requirement for effective and expandable PQC systems that can satisfy changing cybersecurity requirements. In order to protect sensitive data in the digital era, this study emphasizes the need for implementing quantum-secure systems by fusing theoretical understandings with real-world applications.
Group signatures and their variants have been widely used in privacy-sensitive scenarios such as anonymous authentication and attestation. In this paper, we present a new post-quantum group signature scheme from symmetric primitives. Using only symmetric primitives makes the scheme less prone to unknown attacks than basing the design on newly proposed hard problems whose security is less well-understood. However, symmetric primitives do not have rich algebraic properties, and this makes it extremely challenging to design a group signature scheme on top of them. It is even more challenging if we want a group signature scheme suitable for real-world applications, one that can support large groups and require few trust assumptions. Our scheme is based on MPC-in-the-head non-interactive zero-knowledge proofs, and we specifically design a novel hash-based group credential scheme, which is rooted in the SPHINCS+ signature scheme but with various modifications to make it MPC (multi-party computation) friendly. The security of the scheme has been proved under the fully dynamic group signature model. We provide an implementation of the scheme and demonstrate the feasibility of handling a group size as large as 2 60 . This is the first group signature scheme from symmetric primitives that supports such a large group size and meets all the security requirements.
Since 2016’s NIST call for standardization of post-quantum cryptographic primitives, developing efficient post-quantum secure digital signature schemes has become a highly active area of research. The difficulty in constructing such schemes is evidenced by NIST reopening the call in 2022 for digital signature schemes, because of missing diversity in existing proposals. In this work, we introduce the new postquantum digital signature scheme MiRitH. As direct successor of a scheme recently developed by Adj, Rivera-Zamarripa and Verbel (Africacrypt ’23), it is based on the hardness of the MinRank problem and follows the MPC-in-the-Head paradigm. We revisit the initial proposal, incorporate design-level improvements and provide more efficient parameter sets. We also provide the missing justification for the quantum security of all parameter sets following NIST metrics. In this context we design a novel Grover-amplified quantum search algorithm for solving the MinRank problem that outperforms a naive quantum brute-force search for the solution.MiRitH obtains signatures of size 5.7 kB for NIST category I security and therefore competes for the smallest signatures among any post-quantum signature following the MPCitH paradigm.At the same time MiRitH offers competitive signing and verification timings compared to the state of the art. To substantiate those claims we provide extensive implementations. This includes a reference implementation as well as optimized constant-time implementations for Intel processors (AVX2), and for the ARM (NEON) architecture. The speedup of our optimized AVX2 implementation relies mostly on a redesign of the finite field arithmetic, improving over existing implementations as well as an improved memory management.
Distributed systems are widely used in modern environments such as cloud platforms, Internet of Things (IoT) networks, smart grids, and blockchain-based systems. These platforms often require digital signatures to maintain trust between devices or users. When many signatures are shared at once, the size of the communication grows, and processing takes more time. This becomes a problem in applications where quick message verification is important. Classical digital signature schemes, such as Rivest-Shamir-Adleman (RSA) and Elliptic Curve Digital Signature Algorithm (ECDSA), are not safe against quantum attacks. Post-quantum cryptography offers better protection, but it often increases communication size and computation cost. This paper introduces a quantum-resistant model that supports signature aggregation and constant-time verification. The method is based on lattice-based techniques, using structures similar to CRYSTALS-Dilithium. By combining several signatures into a single aggregated form, the model reduces the time needed for verification and the overall communication overhead. The design is suitable for real-time applications, offering strong accuracy and faster message handling. Simulation results show that the proposed method performs better than recent approaches in multiple areas. The model achieves a low authentication time, high verification accuracy, reduced message size, and improved throughput. These benefits help meet the needs of distributed systems where speed, accuracy, and security must work together. The architecture is designed to be flexible for use in real-world deployments. Future directions include support for multi-party signing, adaptive quantum-safe policies, and integration with quantum co-processors. This research supports the development of secure and efficient communication frameworks that remain effective even in the presence of future quantum threats.
The MPC-in-the-head introduced in [IKOS07] has established itself as an important paradigm to design efficient digital signatures. It has been leveraged in the Picnic scheme [CDG+ 20] that reached the third round of the NIST PQC Standardization process. It has also been used in [Beu20] to introduce the Proof of Knowledge (PoK) with Helper paradigm. This construction permits to design shorter signatures but induces a non negligible performance overhead as it uses cut-and-choose. In this paper, we introduce the PoK leveraging structure paradigm along with its associated challenge space amplification technique. Our new approach to design PoK brings some improvements over the PoK with Helper one. Indeed, we show how one can substitute the Helper in these constructions by leveraging the underlying structure of the considered problem. This approach does not suffer from the performance overhead inherent to the PoK with Helper paradigm hence offers different trade-offs between security, signature sizes and performances. We also present four new post-quantum signature schemes. The first one is based on a new PoK with Helper for the Syndrome Decoding problem. It relies on ideas from [BGKM22] and [FJR21] and improve the latter using a new technique that can be seen as performing some cut-and-choose with a meet in the middle approach. The three other signatures are based on our new PoK leveraging structure approach and as such illustrate its versatility. We provide new PoK related to the Permuted Kernel Problem (PKP), Syndrome Decoding (SD) problem and Rank Syndrome Decoding (RSD) problem. In practice, these PoK lead to comparable or shorter signatures than existing ones. Indeed, considering (public key + signature), we get sizes below 9kB for our signature related to the PKP problem, below 15kB for our signature related to the SD problem and below 7kB for our signature related to the RSD problem.
The advent of quantum computing presents a paradigm shift in modern cybersecurity, threatening the foundations of classical cryptographic systems such as RSA, ECC, and Diffie–Hellman key exchange. Quantum algorithms like Shor’s and Grover’s can efficiently break these schemes, rendering existing encryption mechanisms vulnerable and obsolete. This growing risk necessitates the development of quantum-resilient or post-quantum cryptographic (PQC) solutions that can safeguard data and computation in the era of quantum networks. Secure Multi-Party Computation (SMPC), a cornerstone of privacy-preserving computation, enables multiple entities to jointly compute a function over their private inputs without revealing them. However, its traditional security assumptions are also undermined by quantum threats. This research aims to explore and evaluate quantum-safe cryptographic protocols for integrating PQC into SMPC frameworks, thereby ensuring both confidentiality and correctness even in the presence of quantum-capable adversaries. The study focuses on lattice-based, hash-based, and code-based cryptographic primitives, analyzing their resilience, efficiency, and scalability when applied to distributed systems. A comparative framework is proposed to assess the performance and security trade-offs of different post-quantum SMPC implementations under realistic network conditions. The findings are expected to contribute to the design of a new class of cryptographic protocols capable of resisting quantum attacks, supporting the secure functioning of next-generation networks, and guiding policymakers and technologists toward practical post-quantum standardization. Ultimately, this research strengthens the bridge between theoretical cryptography and real-world cybersecurity readiness in the post-quantum era.