Multi-signatures in the plain public-key model and a general forking lemma

DMCA

Multi-signatures in the plain public-key model and a general forking lemma (2006)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Mihir Bellare

Venue:	In ACM CCS 06
Citations:	48 - 6 self

BibTeX

@INPROCEEDINGS{Bellare06multi-signaturesin,
    author = {Mihir Bellare},
    title = {Multi-signatures in the plain public-key model and a general forking lemma},
    booktitle = {In ACM CCS 06},
    year = {2006},
    pages = {390--399},
    publisher = {ACM Press}
}

OpenURL

Abstract

A multi-signature scheme enables a group of signers to produce a compact, joint signature on a common document, and has many potential uses. However, existing schemes impose key setup or PKI requirements that make them impractical, such as requiring a dedicated, distributed key generation protocol amongst potential signers, or assuming strong, concurrent zero-knowledge proofs of knowledge of secret keys done to the CA at key registration. These requirements limit the use of the schemes. We provide a new scheme that is proven secure in the plain public-key model, meaning requires nothing more than that each signer has a (certified) public key. Furthermore, the important simplification in key management achieved is not at the cost of efficiency or assurance: our scheme matches or surpasses known ones in terms of signing time, verification time and signature size, and is proven secure in the random-oracle model under a standard (not bilinear map related) assumption. The proof is based on a simplified and general Forking Lemma that may be of independent interest.

Keyphrases

general forking lemma plain public-key model proven secure potential signer joint signature scheme impose key setup many potential us new scheme independent interest key management key registration signing time random-oracle model key generation protocol multi-signature scheme important simplification signature size verification time secret key common document public key scheme match concurrent zero-knowledge proof pki requirement

DMCA