Paper 2021/1318

Supersingular Isogeny-Based Ring Signature

Maryam Sheikhi Garjan
N. Gamze Orhon Kılıç
Murat Cenk

A ring signature is a digital signature scheme that allows identifying a group of possible signers without revealing the identity of the actual signer. In this paper, we first present a post-quantum sigma protocol for a ring that relies on the supersingular isogeny-based interactive zero-knowledge identification scheme proposed by De Feo, Jao, and Plût in 2014. Then, we construct a ring signature from the proposed sigma protocol for a ring by applying the Fiat-Shamir transform. In order to reduce the size of exchanges, we use Merkle trees and show that the signature size increases logarithmically in the size of the ring. The security proofs and complexity analyses of the proposed protocols are also provided.

Note: This work has been submitted to the IEEE for possible publication. Copyright may be transferred without notice, after which this version may no longer be accessible.

Available format(s)
Public-key cryptography
Publication info
Post-quantum cryptography Supersingular isogeny Ring signatures.
Contact author(s)
mashe @ itu dk
gamze kilic @ metu edu tr
mcenk @ metu edu tr
2022-06-04: last of 3 revisions
2021-09-30: received
See all versions
Short URL
Creative Commons Attribution


      author = {Maryam Sheikhi Garjan and N.  Gamze Orhon Kılıç and Murat Cenk},
      title = {Supersingular Isogeny-Based Ring Signature},
      howpublished = {Cryptology ePrint Archive, Paper 2021/1318},
      year = {2021},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.