Efficient Extension of Standard Schnorr/RSA signatures into Universal Designated-Verifier Signatures

Ron Steinfeld; Huaxiong Wang; Josef Pieprzyk

Paper 2003/193

Efficient Extension of Standard Schnorr/RSA signatures into Universal Designated-Verifier Signatures

Ron Steinfeld, Huaxiong Wang, and Josef Pieprzyk

Abstract

Universal Designated-Verifier Signature (UDVS) schemes are digital signature schemes with additional functionality which allows any holder of a signature to designate the signature to any desired designated-verifier such that the designated-verifier can verify that the message was signed by the signer, but is unable to convince anyone else of this fact. Since UDVS schemes reduce to standard signatures when no verifier designation is performed, it is natural to ask how to extend the classical Schnorr or RSA signature schemes into UDVS schemes, so that the existing key generation and signing implementation infrastructure for these schemes can be used without modification. We show how this can be efficiently achieved, and provide proofs of security for our schemes in the random oracle model.

Note: Several minor changes and corrections have been made to the previous version.

Metadata

Available format(s): PDF PS
Publication info: Published elsewhere. This is the full version of a paper to be presented at PKC 2004.
Keywords: Signature Designated-Verifier Universal
Contact author(s): rons @ ics mq edu au
History: 2003-12-15: revised; 2003-09-17: received; See all versions
Short URL: https://ia.cr/2003/193
License: CC BY

BibTeX

@misc{cryptoeprint:2003/193,
      author = {Ron Steinfeld and Huaxiong Wang and Josef Pieprzyk},
      title = {Efficient Extension of Standard Schnorr/{RSA} signatures into Universal Designated-Verifier Signatures},
      howpublished = {Cryptology {ePrint} Archive, Paper 2003/193},
      year = {2003},
      url = {https://eprint.iacr.org/2003/193}
}