On the security of the digital signature algorithm

DOI10.1023/A:1016549024113MaRDI QIDQ1611356zbMATH OpenOpenAlexFDO

Authors Theodoulos Garefalakis, Ian Blake

Publication date 21 August 2002

Published in Designs, Codes and Cryptography (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1023/a:1016549024113

zbMATH Keywords

digital signature security

Mathematics Subject Classification ID

Cryptography (94A60) Authentication, digital signatures and secret sharing (94A62)

Review text

The authors develop a new key-recovery attack against the Digital Signature Algorithm (DSA). It is a variant of known attacks by Boneh et al. and is also based on lattice basis reduction techniques. They prove that the system will be insecure if half of the total number of bits in the secret and ephemeral keys (or in two ephemeral keys) are known provided that the unknown bits are contiguous.

Recommendations

• The insecurity of the digital signature algorithm with partially known nonces
• Lattice attacks on digital signature schemes
• Some lattice attacks on DSA and ECDSA
• Cryptographic Hardware and Embedded Systems - CHES 2004
• The insecurity of the elliptic curve digital signature algorithm with partially known nonces

Cited in

(21)

• A variant of digital signature algorithm
• DSA signing key recovery with noisy side channels and variable error rates
• The insecurity of the digital signature algorithm with partially known nonces
• A probabilistic analysis on a lattice attack against DSA
• scientific article; zbMATH DE number 1618040 (Why is no real title available?)
• (EC)DSA lattice attacks based on Coppersmith's method
• Lattice attacks on DSA schemes based on Lagrange's algorithm
• A new generic digital signature algorithm
• New lattice attacks on DSA schemes
• Digital signature algorithm for securing digital identities
• Application of the lattice theory to the analysis of digital signature schemes
• Attacking (EC)DSA given only an implicit hint
• scientific article; zbMATH DE number 1330056 (Why is no real title available?)
• Some lattice attacks on DSA and ECDSA
• scientific article; zbMATH DE number 1759310 (Why is no real title available?)
• scientific article; zbMATH DE number 2158221 (Why is no real title available?)
• scientific article; zbMATH DE number 1852139 (Why is no real title available?)
• Cryptographic Hardware and Embedded Systems - CHES 2004
• A new version of ElGamal signature scheme
• Attacking (EC)DSA scheme with ephemeral keys sharing specific bits
• Attacking (EC)DSA with partially known multiples of nonces

This page was built for publication: On the security of the digital signature algorithm

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q1611356)