Paper 2024/1941
Universally Composable Server-Supported Signatures for Smartphones
Abstract
Smart-ID is a signing and authentication service available to residents of Belgium, Estonia, Iceland, Latvia and Lithuania. Such smartphone-based signing service delivers the usability of software keys with security guarantees of ID-cards by relying on a remote server to compensate for weak device protection. Security of current Smart-ID relies on multi-prime server-supported RSA, password-authenticated key shares and clone detection mechanism. Unfortunately, the security properties of the underlying protocol (Buldas et al. ESORICS 2017) have been specified only in ``game-based'' manner. In other words, there are no guarantees for the protocol being secure in concurrent setting. We remedy this shortcoming by presenting two ideal functionalities $\mathcal{F}^{\textsf{gSpl}}$ and $\mathcal{F}_{\textsf{Sig}}^{\textsf{Spl}}$ for server-supported signing in Universal Composability model. We show that improved RSA server-supported protocol realizes $\mathcal{F}^{\textsf{gSpl}}$ and give practical example of server-supported ECDSA protocol realizing $\mathcal{F}_{\textsf{ECDSA}}^{\textsf{Spl}}$.
Metadata
- Available format(s)
-
PDF
- Category
- Cryptographic protocols
- Publication info
- Published by the IACR in CIC 2026
- DOI
- 10.62056/a3c3wa0kr
- Keywords
- universal composabilityserver-supported signatures
- Contact author(s)
-
nikita snetkov @ cyber ee
jelizaveta vakarjuk @ cyber ee
peeter laud @ cyber ee - History
- 2026-05-05: revised
- 2024-11-29: received
- See all versions
- Short URL
- https://ia.cr/2024/1941
- License
-
CC BY-NC-ND
BibTeX
@misc{cryptoeprint:2024/1941,
author = {Nikita Snetkov and Jelizaveta Vakarjuk and Peeter Laud},
title = {Universally Composable Server-Supported Signatures for Smartphones},
howpublished = {Cryptology {ePrint} Archive, Paper 2024/1941},
year = {2024},
doi = {10.62056/a3c3wa0kr},
url = {https://eprint.iacr.org/2024/1941}
}