Cryptology ePrint Archive: Report 2014/745

Universal Signature Aggregators

Susan Hohenberger and Venkata Koppula and Brent Waters

Abstract: We introduce the concept of universal signature aggregators. In a universal signature aggregator system, a third party, using a set of common reference parameters, can aggregate a collection of signatures produced from any set of signing algorithms (subject to a chosen length constraint) into one short signature whose length is independent of the number of signatures aggregated. In prior aggregation works, signatures can only be aggregated if all signers use the same signing algorithm (e.g., BLS) and shared parameters. A universal aggregator can aggregate across schemes even in various algebraic settings (e.g., BLS, RSA, ECDSA), thus creating novel opportunities for compressing authentication overhead. It is especially compelling that existing public key infrastructures can be used and that the signers do not have to alter their behavior to enable aggregation of their signatures.

We provide multiple constructions and proofs of universal signature aggregators based on indistinguishability obfuscation and other supporting primitives. We detail our techniques as well as the tradeoffs in features and security of our solutions.

Category / Keywords:

Date: received 24 Sep 2014

Contact author: k venkata vk at gmail com

Available format(s): PDF | BibTeX Citation

Version: 20140926:083835 (All versions of this report)

Short URL: ia.cr/2014/745

Discussion forum: Show discussion | Start new discussion


[ Cryptology ePrint archive ]