Paper 2017/1022

Direct Anonymous Attestation from Lattices

Rachid El Bansarkhani and Ali El Kaafarani


Direct Anonymous Attestation (DAA) is a complex cryptographic protocol that has been widely deployed in practice, with more than 500 million machines in the market that are already equipped with its hardware, the so-called Trusted Module Platform (TPM). While formalizing the right security model for such a complex protocol has triggered a dense line of research, all the proposed DAA schemes so far are based on number-theoretic problems that are known to be vulnerable to quantum computer attacks. In this paper, we propose the first lattice-based DAA scheme that is secure w.r.t. the most up-to-date security model proposed by Camenisch et al. More precisely, our lattice-based DAA scheme is secure in the Universally Composable (UC) security model. Furthermore, we give (amongst others) the first lattice-based DAA scheme providing user controlled linkability that is realized by means of a new lattice-based MAC/TAG construction which could be of independent interest.

Available format(s)
Public-key cryptography
Publication info
Preprint. MINOR revision.
Lattice-based CryptographyAnonymous SignaturesDAA
Contact author(s)
elbansarkhani @ cdc informatik tu-darmstadt de
2017-10-25: received
Short URL
Creative Commons Attribution


      author = {Rachid El Bansarkhani and Ali El Kaafarani},
      title = {Direct Anonymous Attestation from Lattices},
      howpublished = {Cryptology ePrint Archive, Paper 2017/1022},
      year = {2017},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.