In most of these schemes, when signing a message $m$, a partial signature of $m$ is computed in the off-line phase. We call this part of signature the off-line signature token of message $m$. In some special applications, the off-line signature tokens might be exposed in the off-line phase. For example, some signers might want to transmit off-line signature tokens in the off-line phase in order to save the on-line transmission bandwidth. Another example is in the case of on-line/off-line threshold signature schemes, where off-line signature tokens are unavoidably exposed to all the players in the off-line phase.
This paper discusses this exposure problem and introduces a new notion: divisible on-line/off-line signatures, in which exposure of off-line signature tokens in off-line phase is allowed. An efficient construction of this type of signatures is also proposed. Furthermore, we show an important application of divisible on-line/off-line signatures in the area of on-line/off-line threshold signatures.
Category / Keywords: Signature Schemes, Divisible On-line/Off-line Signatures, On-line/Off-line Threshold Signatures. Publication Info: An extended abstract of this paper appears in CT-RSA 2009, LNCS 5473, Springer-Verlag, 2009. Date: received 22 Oct 2008, last revised 19 Apr 2009 Contact author: czgao at gzhu edu cn Available format(s): Postscript (PS) | Compressed Postscript (PS.GZ) | PDF | BibTeX Citation Note: A small revision in the statement of Theorem 1. Version: 20090420:031937 (All versions of this report) Short URL: ia.cr/2008/447 Discussion forum: Show discussion | Start new discussion