Cryptology ePrint Archive: Report 2005/192
On the security and the efficiency of the Merkle signature scheme
Abstract: This paper builds on the multi-time signature scheme proposed by Merkle. We prove that the original scheme is existentially unforgeable under adaptive chosen message attack. Moreover, we present an improved version which has three advantages: It is provably forward secure. The number of signatures that can be made with one private key is --- in a practical sense --- unlimited. Finally, the cost for key generation is kept low.
The theoretical exposition is complemented by experimental data about the efficiency of the improved Merkle signature scheme.
Category / Keywords: public-key cryptography / Merkle Signature Scheme, Forward Security, Provable Security, Lamport-Diffie one-time Signature Scheme.
Date: received 23 Jun 2005
Contact author: coronado at cdc informatik tu-darmstadt de
Available format(s): Postscript (PS) | Compressed Postscript (PS.GZ) | PDF | BibTeX Citation
Version: 20050623:094202 (All versions of this report)
Short URL: ia.cr/2005/192
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]