Efficient Fully Structure-Preserving Signatures for Large Messages

Jens Groth

Abstract

We construct both randomizable and strongly existentially unforgeable structure-preserving signatures for messages consisting of many group elements. To sign a message consisting of N=mn group elements we have a verification key size of $m$ group elements and signatures contain n+2 elements. Verification of a signature requires evaluating n+1 pairing product equations. We also investigate the case of fully structure-preserving signatures where it is required that the secret signing key consists of group elements only. We show a variant of our signature scheme allowing the signer to pick part of the verification key at the time of signing is still secure. This gives us both randomizable and strongly existentially unforgeable fully structure-preserving signatures. In the fully structure preserving scheme the verification key is a single group element, signatures contain m+n+1 group elements and verification requires evaluating n+1 pairing product equations.

Available format(s)
Category
Public-key cryptography
Publication info
Preprint. MINOR revision.
Keywords
Digital signaturespairing-based cryptographyfull structure-preservation
Contact author(s)
j groth @ ucl ac uk
History
Short URL
https://ia.cr/2015/824

CC BY

BibTeX

@misc{cryptoeprint:2015/824,
author = {Jens Groth},
title = {Efficient Fully Structure-Preserving Signatures for Large Messages},
howpublished = {Cryptology ePrint Archive, Paper 2015/824},
year = {2015},
note = {\url{https://eprint.iacr.org/2015/824}},
url = {https://eprint.iacr.org/2015/824}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.