A Traceable Ring Signature Scheme based on Coding Theory
A Traceable Ring Signature Scheme based on Coding Theory
复制标题
DOI：
10.1007/978-3-030-25510-7_21
复制
发表时间：
2019-05
期刊：
影响因子：
--
通讯作者：
P. Branco;P. Mateus
中科院分区：
文献类型：
--
作者：
P. Branco;P. Mateus
可跟踪环签名是环签名的一种变体，当它针对同一组用户签名两个不同的消息时，允许显示用户的身份。它在电子投票和加密货币中都有应用，比如众所周知的门罗币。我们提出了第一个可追溯的环签名方案，该方案的安全性基于综合征解码问题的硬度，这是编码理论中经典算法和量子算法都无法解决的问题。为了构建该方案，我们使用了Stern协议的一种变体，并以一种巧妙的方式对其应用Fiat-Shamir变换，我们获得了一个允许可追溯性的环签名。我们证明了所得到的协议具有随机oracle模型中可跟踪环签名的标准安全属性：标签链接性、匿名性和可推诿性。据我们所知，这是后量子环境下首次提出可追踪环签名方案。
Traceable ring signatures are a variant of ring signatures which allows the identity of a user to be revealed, when it signs two different messages with respect to the same group of users. It has applications in e-voting and in cryptocurrencies, such as the well-known Monero. We propose the first traceable ring signature scheme whose security is based on the hardness of the Syndrome Decoding problem, a problem in coding theory which is conjectured to be unsolvable by both classical and quantum algorithms. To construct the scheme, we use a variant of Stern’s protocol and, by applying the Fiat-Shamir transform to it in an ingenious way, we obtain a ring signature that allows traceability. We prove that the resulting protocol has the standard security properties for traceable ring signatures in the random oracle model: tag-linkability, anonymity and exculpability. As far as we know, this is the first proposal for a traceable ring signature scheme in the post-quantum setting.