WOTSwana: A Generalized Sleeve Construction for Multiple Proofs of Ownership
WOTSwana: A Generalized Sleeve Construction for Multiple Proofs of Ownership
复制标题
WOTSwana：用于多重所有权证明的通用套筒结构
DOI：
10.1007/978-3-031-29371-9_24
复制
发表时间：
2023
期刊：
影响因子：
--
通讯作者：
Mario Yaksetig
中科院分区：
文献类型：
--
作者：
David Chaum;Mario Larangeira;Mario Yaksetig
该结构是由Chaum等人提出的。(ACNS‘21)通过允许用户生成安全地嵌套在签名方案(即，ECDSA)的秘密密钥中的“备份密钥”，为数字钱包引入了额外的安全层。备份密钥是保密的，可以用来颁发所有权证明，即只有这个秘密密钥的真正所有者才能生成基于WOTS+签名方案的证明。作者提出了一种证明所有权的形式技术，只是非正式地概述了一种将其推广到多重证明的结构。这项工作发现他们提出的构造存在签名大小和签名/验证计算复杂度变化、线性构造的局限性等缺陷，因此我们引入了WOTSwana，这是一个更一般的方案的推广，即一个额外的安全层，它产生所有权的多重证明，并给出了两个构造的彻底形式化：(1)由大量WOTS+私钥/公钥的线性串联给出的构造；(2)基于树形结构的构造，即树叶是WOTS+私钥/公钥对的Merkle树。此外，我们还给出了多个所有权证明的安全性分析，表明这项工作解决了前面提到的原始构造的缺陷。特别是，我们扩展了原始的安全定义。最后，我们通过讨论创建一个加密的群聊消息传递应用程序来说明我们的构造的另一个应用程序。
Theconstruction proposed by Chaum et al. (ACNS’21) introduces an extra security layer for digital wallets by allowing users to generate a “back up key” securely nested inside the secret key of a signature scheme,i.e., ECDSA. The “back up key”, which is secret, can be used to issue a “proof of ownership”,i.e., only the real owner of this secret key can generate asingleproof, which is based on the WOTS+ signature scheme. The authors ofproposed the formal technique for asingleproof of ownership, and only informally outlined a construction to generalize it to multiple proofs. This work identifies that their proposed construction presents drawbacks,i.e., varying of signature size and signing/verifying computation complexity, limitation of linear construction, etc. Therefore we introduceWOTSwana, a generalization of, which is, more concretely, a more general scheme,i.e.an extra security layer that generatesmultipleproofs of ownership, and put forth a thorough formalization of two constructions: (1) one given by a linear concatenation of numerous WOTS+ private/public keys, and (2) a construction based on tree like structure,i.e., an underneath Merkle tree whose leaves are WOTS+ private/public key pairs. Furthermore, we present the security analysis for multiple proofs of ownership, showcasing that this work addresses the early mentioned drawbacks of the original construction. In particular, we extend the original security definition for. Finally, we illustrate an alternative application of our construction, by discussing the creation of an encrypted group chat messaging application.