Paper 2021/1368

Isogeny-based Group Signatures and Accountable Ring Signatures in QROM

Kai-Min Chung, Academia Sinica
Yao-Ching Hsieh, University of Washington
Mi-Ying Huang, University of Southern California
Yu-Hsuan Huang, Centrum Wiskunde & Informatica
Tanja Lange, Eindhoven University of Technology
Bo-Yin Yang, Academia Sinica

We provide the first isogeny-based group signature (GS) and accountable ring signature (ARS) that are provably secure in the quantum random oracle model (QROM). We do so by building an intermediate primitive called openable sigma protocol and show that every such protocol gives rise to a secure ARS and GS. Additionally, the QROM security is guaranteed if the perfect unique-response property is satisfied. Our design, with the underlying protocol satisfying this essential unique-response property, is sophisticatedly crafted for QROM security. From there, with clever twists to available proving techniques, we obtain the first isogeny-based ARS and GS that are proven QROM-secure. Concurrently, an efficient construction was proposed by Beullens et al. (Eurocrypt 2022), but is only proven secure in the classical random oracle model (ROM). Our proposal seeks stronger QROM security, although it is less efficient due to the signature size quadratically scaling with the ring/group size.

Available format(s)
Public-key cryptography
Publication info
isogenygroup signatureaccountable ring signaturequantum random oracle model
Contact author(s)
kmchung @ iis sinica edu tw
ychsieh @ cs washington edu
miying huang @ usc edu
yhh @ cwi nl
tanja @ hyperelliptic org
byyang @ iis sinica edu tw
2023-10-23: last of 5 revisions
2021-10-12: received
See all versions
Short URL
Creative Commons Attribution


      author = {Kai-Min Chung and Yao-Ching Hsieh and Mi-Ying Huang and Yu-Hsuan Huang and Tanja Lange and Bo-Yin Yang},
      title = {Isogeny-based Group Signatures and Accountable Ring Signatures in QROM},
      howpublished = {Cryptology ePrint Archive, Paper 2021/1368},
      year = {2021},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.