Paper 2003/192

Universal Designated-Verifier Signatures

Ron Steinfeld, Laurence Bull, Huaxiong Wang, and Josef Pieprzyk

Abstract

Motivated by privacy issues associated with dissemination of signed digital certificates, we define a new type of signature scheme called a ‘Universal Designated-Verifier Signature’ (UDVS). A UDVS scheme can function as a standard publicly-verifiable digital signature but has additional functionality which allows any holder of a signature (not necessarily the signer) to designate the signature to any desired designated-verifier (using the verifier’s public key). Given the designated-signature, the designated-verifier can verify that the message was signed by the signer, but is unable to convince anyone else of this fact. We propose an efficient deterministic UDVS scheme constructed using any bilinear group-pair. Our UDVS scheme functions as a standard Boneh-Lynn-Shacham (BLS) signature when no verifier-designation is performed, and is therefore compatible with the key-generation, signing and verifying algorithms of the BLS scheme. We prove that our UDVS scheme is secure in the sense of our unforgeability and privacy notions for UDVS schemes, under the Bilinear Diffie-Hellman (BDH) assumption for the underlying group-pair, in the random-oracle model. We also demonstrate a general constructive equivalence between a class of unforgeable and unconditionally-private UDVS schemes having unique signatures (which includes the deterministic UDVS schemes) and a class of ID-Based Encryption (IBE) schemes which contains the Boneh-Franklin IBE scheme but not the Cocks IBE scheme.

Metadata
Available format(s)
PDF PS
Publication info
Published elsewhere. This is the full version of a paper to be presented at Asiacrypt 2003.
Contact author(s)
rons @ ics mq edu au
History
2003-09-17: received
Short URL
https://ia.cr/2003/192
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2003/192,
      author = {Ron Steinfeld and Laurence Bull and Huaxiong Wang and Josef Pieprzyk},
      title = {Universal Designated-Verifier Signatures},
      howpublished = {Cryptology ePrint Archive, Paper 2003/192},
      year = {2003},
      note = {\url{https://eprint.iacr.org/2003/192}},
      url = {https://eprint.iacr.org/2003/192}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.