Strongly unforgeable ring signature scheme from lattices in the standard model
Summary: In a ring signature scheme, a user selects an arbitrary ring to be able to sign a message on behalf of the ring without revealing the signer's identity. Whistle-blowers especially find this useful. To date, various ring signature schemes have been proposed, all considered to be secure as existentially unforgeable with respect to insider corruption; that is, an adversary who chooses ring-message pairs for which he requests signatures, corrupts honest users, and obtains their signing keys can not produce forgeries for new ring-message pairs. Lattice-based ring signature schemes offer lower computational overhead and security from quantum attacks. In this paper, we offer a lattice-based scheme. We begin by showing that the existing ring signature schemes are not sufficiently secure, because existential unforgeability still permits a signer to potentially produce a new signature on previously signed messages. Furthermore, we show that existing ring signature schemes from lattices are not even existentially unforgeable with respect to insider corruption. We then improve previous schemes by applying, for the first time, the concept of strong unforgeability with respect to insider corruption to a ring signature scheme in lattices. This offers more security than any previous ring signature scheme: adversaries cannot produce new signatures for any ring-message pair, including previously signed ring-message pairs.
- Adapting Lyubashevsky's signature schemes to the ring signature setting
- An improvement of a ring signature scheme based on lattices
- A simpler construction of identity-based ring signatures from lattices
- Ring signatures: Stronger definitions, and constructions without random oracles
- Ring signatures based on Middle-Product Learning with Errors problems
- A lattice-based threshold ring signature scheme
- A New Efficient Threshold Ring Signature Scheme Based on Coding Theory
- A new ring signature scheme with signer-admission property
- A note on an identity-based ring signature scheme with signer verifiability
- Adapting Lyubashevsky's signature schemes to the ring signature setting
- Advances in Cryptology - EUROCRYPT 2004
- Advances in Cryptology - EUROCRYPT 2004
- An efficient conditionally anonymous ring signature in the random oracle model
- Bonsai trees, or how to delegate a lattice basis
- Efficient Ring Signatures Without Random Oracles
- How To Prove Yourself: Practical Solutions to Identification and Signature Problems
- scientific article; zbMATH DE number 2081086 (Why is no real title available?)
- scientific article; zbMATH DE number 2086700 (Why is no real title available?)
- Introduction to algorithms.
- Lattice mixing and vanishing trapdoors: a framework for fully secure short signatures and more
- New bounds in some transference theorems in the geometry of numbers
- Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer
- Post-quantum cryptography: lattice signatures
- Public Key Cryptography - PKC 2006
- Ring signatures: Stronger definitions, and constructions without random oracles
- Strongly unforgeable signatures and hierarchical identity-based signatures from lattices without random oracles
- Theory of Cryptography
- Trapdoors for hard lattices and new cryptographic constructions
- Trapdoors for lattices: simpler, tighter, faster, smaller
- Worst‐Case to Average‐Case Reductions Based on Gaussian Measures
- SMILE: set membership from ideal lattices with applications to ring signatures and confidential transactions
- One-shot Fiat-Shamir-based NIZK arguments of composite residuosity and logarithmic-size ring signatures in the standard model
- Lattice-based linearly homomorphic signatures in the standard model
- scientific article; zbMATH DE number 5631814 (Why is no real title available?)
- An improvement of a ring signature scheme based on lattices
- Adapting Lyubashevsky's signature schemes to the ring signature setting
- scientific article; zbMATH DE number 7108581 (Why is no real title available?)
This page was built for publication: Strongly unforgeable ring signature scheme from lattices in the standard model
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2336385)
