Compact Structure-Preserving Signatures with Almost Tight Security
Compact Structure-Preserving Signatures with Almost Tight Security
复制标题
紧凑的结构保留签名，具有近乎严格的安全性
DOI：
10.1007/s00145-023-09477-z
复制
发表时间：
2017
影响因子：
3
通讯作者：
Jiaxin Pan
中科院分区：
文献类型：
--
作者：
Masayuki Abe;D. Hofheinz;R. Nishimaki;Miyako Ohkubo;Jiaxin Pan
在结构保持密码学中，每个构建块共享相同的双线性群。这些组必须针对特定的先验固定安全级别生成，因此，至关重要的是，所有相关构建块中的安全降低都尽可能紧密。在这项工作中，我们提出了第一个通用的结构保持签名方案的建设，其减少成本是独立的签名查询的数量。它的选择消息安全性几乎可以归结为一个结构保持公钥加密方案的选择明文安全性和Groth-Sahai证明系统的安全性。从技术上讲，我们将Hofheinz的自适应分区技术（Eurocrypt 2017）用于结构保持签名方案的设置。为了实现一个结构保持计划，我们的新的自适应分区技术的变体只依赖于通用组操作的计划本身。然而，有趣的是，我们将在安全分析期间使用非泛型操作。实例化的非对称双线性群，我们的具体计划的安全性降低到外部Diffie-Hellman假设与线性减少成本的安全参数，独立的签名查询的数量。在我们的计划中的签名包括更多的组元素比那些在其他非紧的计划，但可以更快地验证，假设他们的安全减少的损失是通过增加安全参数到下一个标准的水平补偿。
In structure-preserving cryptography, every building block shares the same bilinear groups. These groups must be generated for a specific, a priori fixed security level, and thus, it is vital that the security reduction in all involved building blocks is as tight as possible. In this work, we present the first generic construction of structure-preserving signature schemes whose reduction cost is independent of the number of signing queries. Its chosen-message security is almost tightly reduced to the chosen-plaintext security of a structure-preserving public-key encryption scheme and the security of Groth–Sahai proof system. Technically, we adapt the adaptive partitioning technique by Hofheinz (Eurocrypt 2017) to the setting of structure-preserving signature schemes. To achieve a structure-preserving scheme, our new variant of the adaptive partitioning technique relies only on generic group operations in the scheme itself. Interestingly, however, we will use non-generic operations during our security analysis. Instantiated over asymmetric bilinear groups, the security of our concrete scheme is reduced to the external Diffie–Hellman assumption with linear reduction cost in the security parameter, independently of the number of signing queries. The signatures in our schemes consist of a larger number of group elements than those in other non-tight schemes, but can be verified faster, assuming their security reduction loss is compensated by increasing the security parameter to the next standard level.
影响因子：
3
作者：
Masayuki Abe;Georg Fuchsbauer;Jens Groth;Kristiyan Haralambiev;Miyako Ohkubo
通讯作者：
Masayuki Abe;Georg Fuchsbauer;Jens Groth;Kristiyan Haralambiev;Miyako Ohkubo
影响因子：
1.6
作者：
Hofheinz, Dennis;Jager, Tibor
通讯作者：
Jager, Tibor