| K. Nyberg and R. A. Ruepple, Message recovery for signature schemes based on the discrete logarithm problem, Advances in cryptology --EUROCRYPT'94, Lecture Notes in Computer Science 950, pp.182--193, 1995. |
....level. It is worth noting that these assumptions can be substituted with standard cryptographic techniques for achieving privacy and authenticity. 3. 2 Signature Scheme We employ a variant of ElGamal type digital signature, which is a slightly modified version of a signature that has been used in [15]. Let p; q be large primes such that qj(p Gamma 1) and let g 2 Z p = GF (p) be an element of order q. Let H( be an appropriate hash function that hashes messages of arbitrary length into an element of Z q . Also let x i 2 Z q be the secret key and y i = g (mod p) be the public key ....
K. Nyberg and R. Rueppel, "Message Recovery for Signature Schemes Based on the Discrete Logarithm Problem," Designs, Codes and Cryptography, vol. 7, pp. 61--81, 1996. Also, Advances in Cryptology - Proceedings of EUROCRYPT '94 Vol. 950 LNCS, pp. 182-193.
....message. ######## 2000 # f x# ####21 ,#9L # ae #### ,####. 1 One way to implement such a scheme is first to sign a message and then to encrypt it. Nyberg and Rueppel suggested an authenticated encryption scheme of this type as an application of their message recovery signature scheme [4]. Other schemes try to reduce the computation and communication costs by combining encryption and signature. This type of schemes, which we call combined schemes, include the Horster Michels Petersen scheme [5] and the Lee Chang scheme [6] Recently proposed signcryption schemes [1, 2, 3, 7] ....
....5, we describe a modification of our scheme for a special case. We conclude in Section 6. 2 Related Work 2. 1 Horster Michels Petersen Scheme We first describe the Horster Michels Petersen authenticated encryption scheme [5] which is based on the Nyberg Rueppel message recovery signature scheme [4]. From now on, Alice is the sender and Bob is the recipient. ffl Initial Setting p : a large prime q : a large prime such that q j p Gamma 1 g 2 Z p : an element of Z p of order q xA 2 Z q : Alice s private key y A = g xA mod p : Alice s public key xB 2 Z q : ....
[Article contains additional citation context not shown here]
Nyberg, K. and Rueppel, R. A., "Message recovery for signature schemes based on the discrete logarithm problem," Eurocrypt '94, LNCS Vol.950, pp.182--193, Springer-Verlag, 1995.
....512 and g denotes a generator for Z p . Each user selects a secret key x u # Z q and computes a public key y u = g x u mod p, where Before introducing our proposed scheme it is necessary to introduce a following two related works. i.e. Kim et al. scheme [4] and Nyberg and Reuppel s scheme [9] Nyberg Reuppel s Signature Scheme [9] Signature Generation) To sign a message M # Z p the signer selects a random number k # Z q and computes R = M .g mod p, and S = R x k mod q where x is the secret key of signer.The pair (R, S) is the signature on the message M . Message recovery ....
.... . Each user selects a secret key x u # Z q and computes a public key y u = g x u mod p, where Before introducing our proposed scheme it is necessary to introduce a following two related works. i.e. Kim et al. scheme [4] and Nyberg and Reuppel s scheme [9] Nyberg Reuppel s Signature Scheme [9] (Signature Generation) To sign a message M # Z p the signer selects a random number k # Z q and computes R = M .g mod p, and S = R x k mod q where x is the secret key of signer.The pair (R, S) is the signature on the message M . Message recovery Verification) To verify the ....
[Article contains additional citation context not shown here]
Nyberg K., Rueppel R.,[1994] "Message recovery for signature schemes based on discrete logarithm problems," Pre-proceeding of Eurocrypt'94. pp 175-190.
....s) is Alice s signature on ,r, by checking whether fiaasa( y. r s rood p is satisfied. Since its publication in 1985, ElGinhal signature lt;k received extensive scrutiny by the research community. In addition, it tttk bccn generalized and adapted to numerous different forms (see for instmtcc [23, 4, 18, 20] and especially [11] where an exhaustive survey of some 13000 E1GamM based signatures has bccn carried out. Two notable variants of E1Gamal signature arc Schnorr signa ture [23] and DSS or Digital Signature Standard [18] With DSS, g is an integer in [1, p 1] with order q modulo p, where q ....
....p from r, s, g, p and y, and then check whether hash(k, m) is identical to r. To illustrate how to shorten E1Gamal bsc(t signatures, now we consider DSS. It should bc stressed that many other E1Gamal buscd signature chcmcs, in par titular those defined on a sub group of order q (scc for example [11, 20]) can bc shortened in the same way and arc dl equally good candidates for signcryption. Table i shows two shortened versions of DSS, whi( h arc denoted by SDSS1 and SDSS2 respectively. Hcrc arc a few remarks on the table: 1) the first letter S in the name of a scheme stands for shortened , ....
Nyberg, K., Rueppel, R.: Message recovery for signature schemes based on the discrete logarithm problem. Designs, Codes and Cryptography 7 (1996) 61 81.
No context found.
K. Nyberg and R. A. Ruepple, Message recovery for signature schemes based on the discrete logarithm problem, Advances in cryptology --EUROCRYPT'94, Lecture Notes in Computer Science 950, pp.182--193, 1995.
No context found.
K. Nyberg and R. A. Rueppel. Message Recovery for Signature Schemes Based on the Discrete Logarithm Problem. In Eurocrypt '94, LNCS 950, pages 182--193. Springer-Verlag, Berlin, 1995.
No context found.
Kaisa Nyberg and Rainer A. Rueppel. Message recovery for signature schemes based on the discrete logarithm problem. In Advances in Cryptology --- EUROCRYPT '94, LNCS 950, pp. 182--193. Springer-Verlag, 1995.
No context found.
K.Nyberg, R.A.Rueppel, "Message Recovery for SignatureSchemes Based on the Discrete Logarithm", Pre-proceedings of Eurocrypt'94,Perugia, Italy, (1994), pp. 175--190, to appear in Lecture Notes in Computer Sciences, Springer Verlag. Markus Michels, David Naccache, and Holger Petersen
No context found.
K. Nyberg and R. A. Rueppel. Message Recovery for Signature Schemes Based on the Discrete Logarithm Problem. In Eurocrypt '94, LNCS 950, pages 182--193. Springer-Verlag, Berlin, 1995.
No context found.
Kaisa Nyberg and Rainer A. Rueppel. Message recovery for signature schemes based on the discrete logarithm problem. In Advances in Cryptology --- EUROCRYPT '94, LNCS 950, pp. 182--193. Springer-Verlag, 1995.
No context found.
K.Nyberg, R.A.Rueppel, "Message Recovery for SignatureSchemes Based on the Discrete Logarithm", Pre-proceedings of Eurocrypt'94,Perugia, Italy, (1994), pp. 175--190, to appear in Lecture Notes in Computer Sciences, Springer Verlag. Markus Michels, David Naccache, and Holger Petersen
No context found.
K. Nyberg and R. A. Rueppel. Message recovery for signature schemes based on the discrete logarithm problem. In Advances in Cryptology: Proceedings of EUROCRYPT'94, 1994.
No context found.
Kaisa Nyberg and Rainer A. Rueppel. Message recovery for signature schemes based on the discrete logarithm problem. In Advances in Cryptology --- EUROCRYPT '94, LNCS 950, pp. 182--193. Springer-Verlag, 1995.
No context found.
K.Nyberg, R.A.Rueppel, "Message Recovery for SignatureSchemes Based on the Discrete Logarithm", Pre-proceedings of Eurocrypt'94,Perugia, Italy, (1994), pp. 175--190, to appear in Lecture Notes in Computer Sciences, Springer Verlag. Markus Michels, David Naccache, and Holger Petersen
No context found.
K. Nyberg and R.A. Rueppel, Message Recovery for Signature Schemes Based on the Discrete Logarithm Problem, Proc. of Eurocrypt94, Springer-Verlag, LNCS 950, pp.182C193, 1995.
No context found.
Kaisa Nyberg and Rainer A. Rueppel. Message recovery for signature schemes based on the discrete logarithm problem. In Advances in Cryptology --- EUROCRYPT '94, LNCS 950, pp. 182--193. Springer-Verlag, 1995.
No context found.
K. Nyberg and R. Rueppel, \Message Recovery for Signature Schemes Based on the Discrete Logarithm Problem," Advances in Cryptology | EUROCRYPT '94, Springer-Verlag, 1995, pp. 182-193. 14
No context found.
K.Nyberg, R.A.Rueppel, "Message Recovery for SignatureSchemes Based on the Discrete Logarithm", Pre-proceedings of Eurocrypt'94,Perugia, Italy, (1994), pp. 175--190, to appear in Lecture Notes in Computer Sciences, Springer Verlag. Markus Michels, David Naccache, and Holger Petersen
No context found.
K. Nyberg and R.A. Rueppel. Message recovery for signature schemes based on the discrete logarithm problem. Designs, Codes and Cryptography, 1996, 7(1-2): 61-81.
No context found.
K.Nyberg, R.A.Rueppel, "Message Recovery for SignatureSchemes Based on the Discrete Logarithm", Pre-proceedings of Eurocrypt'94,Perugia, Italy, (1994), pp. 175--190, to appear in Lecture Notes in Computer Sciences, Springer Verlag. Markus Michels, David Naccache, and Holger Petersen
No context found.
Kaisa Nyberg and Rainer A. Rueppel. Message recovery for signature schemes based on the discrete logarithm problem. In Advances in Cryptology --- EUROCRYPT '94, LNCS 950, pp. 182--193. Springer-Verlag, 1995.
No context found.
K. Nyberg and R. A. Rueppel. Message recovery for signature schemes based on the discrete logarithm problem. In Advances in Cryptology: Proceedings of EUROCRYPT'94, 1994.
No context found.
Kaisa Nyberg and Rainer A. Rueppel. Message recovery for signature schemes based on the discrete logarithm problem. In Advances in Cryptology --- EUROCRYPT '94, LNCS 950, pp. 182--193. Springer-Verlag, 1995.
No context found.
K. Nyberg and R. Rueppel. Message Recovery for Signature Schemes Based on the Discrete Logarithm Problem. Design Codes and Cryptography, 7:61-81, 1996.
No context found.
K. Nyberg and R. A. Rueppel. Message recovery for signature schemes based on the discrete logarithm problem. Designs, Codes and Cryptography, 7(1/2), 61-81, 1996.
First 50 documents Next 50
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC