Signature schemes based on the strong RSA assumption
Signature schemes based on the strong RSA assumption
复制标题
DOI：
10.1145/319709.319716
复制
发表时间：
1999-11
期刊：
影响因子：
--
通讯作者：
R. Cramer;V. Shoup
中科院分区：
文献类型：
--
作者：
R. Cramer;V. Shoup
我们描述和分析了一个新的数字签名方案。新方案是高效的，不需要签名者保持任何状态，并且在合理的难解性假设（所谓的强RSA假设）下，可以证明该方案是安全的，不受自适应选择消息攻击。此外，一个散列函数可以被纳入到这样的方式，它也是安全的随机预言模型下的标准RSA假设。
We describe and analyze a new digital signature scheme. The new scheme is quite efficient, does not require the the signer to maintain any state, and can be proven secure against adaptive chosen message attack under a reasonable intractability assumption, the so-called strong RSA assumption. Moreover, a hash function can be incorporated into the scheme in such a way that it is also secure in the random oracle model under the standard RSA assumption.