Paper 2015/1157

From Identification to Signatures, Tightly: A Framework and Generic Transforms

Mihir Bellare, Bertram Poettering, and Douglas Stebila

Abstract

This paper provides a framework to treat the problem of building signature schemes from identification schemes in a unified and systematic way. The outcomes are (1) Alternatives to the Fiat-Shamir transform that, applied to trapdoor identification schemes, yield signature schemes with tight security reductions to standard assumptions (2) An understanding and characterization of existing transforms in the literature. One of our transforms has the added advantage of producing signatures shorter than produced by the Fiat-Shamir transform. Reduction tightness is important because it allows the implemented scheme to use small parameters (thereby being as efficient as possible) while retaining provable security.

Metadata
Available format(s)
PDF
Publication info
A major revision of an IACR publication in ASIACRYPT 2016
Keywords
Identificationsignaturesreduction tightness
Contact author(s)
mihir @ eng ucsd edu
History
2016-09-04: last of 8 revisions
2015-11-30: received
See all versions
Short URL
https://ia.cr/2015/1157
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2015/1157,
      author = {Mihir Bellare and Bertram Poettering and Douglas Stebila},
      title = {From Identification to Signatures, Tightly: A Framework and Generic Transforms},
      howpublished = {Cryptology ePrint Archive, Paper 2015/1157},
      year = {2015},
      note = {\url{https://eprint.iacr.org/2015/1157}},
      url = {https://eprint.iacr.org/2015/1157}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.