Paper 2014/635
Type 2 Structure-Preserving Signature Schemes Revisited
Sanjit Chatterjee and Alfred Menezes
Abstract
At CRYPTO 2014, Abe, Groth, Ohkubo and Tibouchi presented generic-signer structure-preserving signature schemes using Type 2 pairings. The schemes were claimed to enjoy the smallest number of group elements in signatures and the fastest signature verification. By properly accounting for the concrete structure of the underlying group and subgroup membership testing of group elements in signatures, we show that the schemes are not as efficient as claimed. We present natural Type 3 analogues of the Type 2 schemes, and show that the Type 3 schemes are superior to their Type 2 counterparts in every aspect. We also formally establish that all Type 2 structure-preserving signature schemes can be converted to the Type 3 setting without any penalty in security or efficiency, and show that the converse is false.
Metadata
- Available format(s)
- Publication info
- Preprint. MINOR revision.
- Contact author(s)
- sanjit @ csa iisc ernet in
- History
- 2015-09-10: last of 4 revisions
- 2014-08-21: received
- See all versions
- Short URL
- https://ia.cr/2014/635
- License
-
CC BY