BASS: Boolean Automorphisms Signature Scheme

Dima Grigoriev,Ilia Ilmer,Alexey Ovchinnikov,Vladimir Shpilrain

2023-09-08

Abstract:We offer a digital signature scheme using Boolean automorphisms of a multivariate polynomial algebra over integers. Verification part of this scheme is based on the approximation of the number of zeros of a multivariate Boolean function.

Cryptography and Security,Rings and Algebras

What problem does this paper attempt to address?

A SAT-based Public Key Cryptography Scheme

Sebastian E. Schmittner

DOI: https://doi.org/10.48550/arXiv.1507.08094

2015-07-29

Cryptography and Security

Abstract:A homomorphic public key crypto-scheme based on the Boolean Satisfiability Problem is proposed. The public key is a SAT formula satisfied by the private key. Probabilistic encryption generates functions implied to be false by the public key XOR the message bits. A zero-knowledge proof is used to provide signatures.
Digital signature schemes using non-square matrices or scrap automorphisms

Jiale Chen,Dima Grigoriev,Vladimir Shpilrain

2023-12-21

Abstract:We offer two very transparent digital signature schemes: one using non-square matrices and the other using scrap automorphisms. The former can be easily converted to a public key encryption scheme.

Cryptography and Security,Rings and Algebras
An Undeniable Signature Scheme Utilizing Module Lattices

Kunal Dey,Mansi Goyal,Bupendra Singh,Aditi Kar Gangopadhyay

2024-10-25

Abstract:An undeniable signature scheme is type of digital signature where the signer retains control over the signature's verifiability. Therefore with the approval of the signer, only an authenticated verifier can verify the signature. In this work, we develop a module lattice-based post-quantum undeniable signature system. Our method is based on the GPV framework utilizing module lattices, with the security assured by the hardness of the SIS and LWE problems. We have thoroughly proved all the desired securities for the proposed scheme. Finally, we have implemented our protocol for different sets of parameters. The purpose of opting a module variant rather than a ring variant is to provide greater flexibility in selecting parameters.

Cryptography and Security
Rainbow, a new multivariable polynomial signature scheme

Jintai Ding,Dieter Schmidt

DOI: https://doi.org/10.1007/11496137_12

2005-01-01

Abstract:Balanced Oil and Vinegar signature schemes and the unbalanced Oil and Vinegar signature schemes are public key signature schemes based on multivariable polynomials. In this paper, we suggest a new signature scheme, which is a generalization of the Oil-Vinegar construction to improve the efficiency of the unbalanced Oil and Vinegar signature scheme. The basic idea can be described as a construction of multi-layer Oil-Vinegar construction and its generalization. We call our system a Rainbow signature scheme. We propose and implement a practical scheme, which works better than Sflash$^{v_2}$, in particular, in terms of signature generating time.
Signed combinatorial interpretations in algebraic combinatorics

Igor Pak,Colleen Robichaux

2024-07-11

Abstract:We prove the existence of signed combinatorial interpretations for several large families of structure constants. These families include standard bases of symmetric and quasisymmetric polynomials, as well as various bases in Schubert theory. The results are stated in the language of computational complexity, while the proofs are based on the effective Möbius inversion.

Combinatorics,Discrete Mathematics
Algebraic properties of the maps

Jan Schoone,Joan Daemen

DOI: https://doi.org/10.1007/s10623-024-01395-w

IF: 1.4

2024-04-11

Designs Codes and Cryptography

Abstract:The Boolean map defined by (where ) is used in various permutations that are part of cryptographic schemes, e.g., Keccak -f (the SHA-3-permutation), ASCON (the winner of the NIST Lightweight competition), Xoodoo, Rasta and Subterranean (2.0). In this paper, we study various algebraic properties of this map. We consider (through vectorial isomorphism) as a univariate polynomial. We show that it is a power function if and only if . We furthermore compute bounds on the sparsity and degree of these univariate polynomials, and the number of different univariate representations. Secondly, we compute the number of monomials of given degree in the inverse of (if it exists). This number coincides with binomial coefficients. Lastly, we consider as a polynomial map, to study whether the same rule ( ) gives a bijection on field extensions of . We show that this is not the case for extensions whose degree is divisible by two or three. Based on these results, we conjecture that this rule does not give a bijection on any extension field of .

mathematics, applied,computer science, theory & methods
Minimal Axiomatization of Boolean Algebras

Eugene Zhang

2023-10-29

Abstract:In this paper, we present a new axiomatic system that is a minimal axiomatization of Boolean algebras. Furthermore, the symmetric difference is shown to be algebraically analogous to the modular difference of two numbers. Finally, a new method to prove equivalent relations in a Boolean algebra is also given.

Logic
VDOO: A Short, Fast, Post-Quantum Multivariate Digital Signature Scheme

Anindya Ganguly,Angshuman Karmakar,Nitin Saxena

2023-12-15

Abstract:Hard lattice problems are predominant in constructing post-quantum cryptosystems. However, we need to continue developing post-quantum cryptosystems based on other quantum hard problems to prevent a complete collapse of post-quantum cryptography due to a sudden breakthrough in solving hard lattice problems. Solving large multivariate quadratic systems is one such quantum hard problem. Unbalanced Oil-Vinegar is a signature scheme based on the hardness of solving multivariate equations. In this work, we present a post-quantum digital signature algorithm VDOO (Vinegar-Diagonal-Oil-Oil) based on solving multivariate equations. We introduce a new layer called the diagonal layer over the oil-vinegar-based signature scheme Rainbow. This layer helps to improve the security of our scheme without increasing the parameters considerably. Due to this modification, the complexity of the main computational bottleneck of multivariate quadratic systems i.e. the Gaussian elimination reduces significantly. Thus making our scheme one of the fastest multivariate quadratic signature schemes. Further, we show that our carefully chosen parameters can resist all existing state-of-the-art attacks. The signature sizes of our scheme for the National Institute of Standards and Technology's security level of I, III, and V are 96, 226, and 316 bytes, respectively. This is the smallest signature size among all known post-quantum signature schemes of similar security.

Cryptography and Security
On formal verification of arithmetic-based cryptographic primitives

David Nowak

DOI: https://doi.org/10.1007/978-3-642-00730-9_23

2009-04-07

Abstract:Cryptographic primitives are fundamental for information security: they are used as basic components for cryptographic protocols or public-key cryptosystems. In many cases, their security proofs consist in showing that they are reducible to computationally hard problems. Those reductions can be subtle and tedious, and thus not easily checkable. On top of the proof assistant Coq, we had implemented in previous work a toolbox for writing and checking game-based security proofs of cryptographic primitives. In this paper we describe its extension with number-theoretic capabilities so that it is now possible to write and check arithmetic-based cryptographic primitives in our toolbox. We illustrate our work by machine checking the game-based proofs of unpredictability of the pseudo-random bit generator of Blum, Blum and Shub, and semantic security of the public-key cryptographic scheme of Goldwasser and Micali.

Cryptography and Security,Logic in Computer Science
Strong Signature Schemes

Shafi Goldwasser,Silvio Micali,Andrew Chi-Chih Yao

DOI: https://doi.org/10.1145/800061.808774

1983-01-01

Abstract:The notion of digital signature based on trapdoor functions has been introduced by Diffie and Hellman[3]. Rivest, Shamir and Adleman[8] gave the first number theoretic implementation of a signature scheme based on a trapdoor function. If f is a trapdoor function and m a message, f−1(m) is the signature of m. The signature can be verified by computing f(f−1(m)) = m. This approach presents the following problems even when f is hard to invert: 1) there may be special message spaces (or subsets of them) that are easy to sign without knowing the trapdoor information 2) it is possible to forge the signature of random numbers; this violates the requirements of many protocols 3) given a polynomial number of signed messages, it may be possible to sign a new one without knowing the trapdoor information. We solve the above problems by exhibiting two signature schemes for which any strategy of an adversary, who has seen all previously signed messages, that has a moderate success in forging even a single additional signature, is transformable to a fast algorithm for factoring or inverting the RSA function. This provably holds for all message spaces with all possible Probability distributions. Thus, in particular, given the signature of m, forging the signature of m+1 or 2m or 2sm is as hard as factoring. The two signature schemes
A Method for Specifying Complete Signature Randomization and an Algebraic Algorithm Based on It

Alexandr Moldovyan,Dmitriy Moldovyan,Nikolay Moldovyan,Alyona Kurysheva

DOI: https://doi.org/10.3390/math12131970

IF: 2.4

2024-06-25

Mathematics

Abstract:To eliminate the limitations of signature randomization in known algebraic algorithms with a hid den group, the security of which is based on the computational complexity of solving large systems of power equations, a method for ensuring complete randomization is proposed. Based on this method, a new algorithm of the indicated type was developed, using a four-dimensional finite non-commutative associative algebra as an algebraic basis. We obtained estimates of the security of algorithms to direct attacks as well as from attacks based on known signatures, which confirm the effectiveness of the proposed signature randomization method. Due to the relatively small size and signature of the public and private keys, the developed algorithm is of interest as a potential practical post-quantum digital signature scheme.

mathematics
On the signature of biquotients

Oliver Goertsches,Maximilian Schmitt

DOI: https://doi.org/10.1007/s00229-021-01344-0

2021-10-18

manuscripta mathematica

Abstract:Abstract We generalize Hirzebruch–Slodowy’s computation of the signature of equal rank homogeneous spaces to a large class of biquotients.
From the global signature to higher signatures

Jeremy A. Jacobson

DOI: https://doi.org/10.48550/arXiv.1411.0993

2014-11-04

K-Theory and Homology

Abstract:Let $X$ be an algebraic variety over the field of real numbers $\mathbb{R}$. We use the signature of a quadratic form to produce "higher" global signatures relating the derived Witt groups of $X$ to the singular cohomology of the real points $X(\mathbb{R})$ with integer coefficients. We also study the global signature ring homomorphism and use the powers of the fundamental ideal in the Witt ring to prove an integral version of a theorem of Raman Parimala and Jean Colliot-Thelene on the mod 2 signature. Furthermore, we obtain an Atiyah-Hirzebruch spectral sequence for the derived Witt groups of $X$ with 2 inverted. Using this spectral sequence, we provide a bound on the ranks of the derived Witt groups of $X$ in terms of the Betti numbers of $X(\mathbb{R})$. We apply our results to answer a question of Max Karoubi on boundedness of torsion in the Witt group of $X$. Throughout the article, the results are proved for a wide class of schemes over an arbitrary base field of characteristic different from 2 using real cohomology in place of singular cohomology.
Partial Blind-Signature Scheme Based on Bundling Homomorphism

LI Shundong,DAI Yiqi,WANG Daoshun,LUO Ping

DOI: https://doi.org/10.3321/j.issn:1000-0054.2006.07.036

2006-01-01

Abstract:This paper describes a partial blind signature scheme based on the theory of bundling homomorphism. Analysis of the scheme shows by induction that an adversary with polynomial computing ability can neither forge a partial blind signature that can be verified nor sign a message but successfully deny signing it later.An adversary with infinite computing ability can forge a partial blind signature that can be verified,but it can be easily found.Therefore,this scheme can guarantee the benefits of both signer and nominee,and the privacy of the nominee.
CSI-Otter: isogeny-based (partially) blind signatures from the class group action with a twist

Shuichi Katsumata,Yi-Fu Lai,Jason T. LeGrow,Ling Qin

DOI: https://doi.org/10.1007/s10623-024-01441-7

IF: 1.4

2024-07-19

Designs Codes and Cryptography

Abstract:In this paper, we construct the first provably-secure isogeny-based (partially) blind signature scheme. While at a high level the scheme resembles the Schnorr blind signature, our work does not directly follow from that construction, since isogenies do not offer as rich an algebraic structure. Specifically, our protocol does not fit into the linear identification protocol abstraction introduced by Hauck, Kiltz, and Loss (EUROCYRPT'19), which was used to generically construct Schnorr-like blind signatures based on modules such as classical groups and lattices. Consequently, our scheme is provably secure in the random oracle model (ROM) against poly-logarithmically-many concurrent sessions assuming the subexponential hardness of the group action inverse problem. In more detail, our blind signature exploits the quadratic twist of an elliptic curve in an essential way to endow isogenies with a strictly richer structure than abstract group actions (but still more restrictive than modules). The basic scheme has public key size 128 B and signature size 8 KB under the CSIDH-512 parameter sets—these are the smallest among all provably secure post-quantum secure blind signatures. Relying on a new ring variant of the group action inverse problem ( ), we can halve the signature size to 4 KB while increasing the public key size to 512 B. We provide preliminary cryptanalysis of and show that for certain parameter settings, it is essentially as secure as the standard . Finally, we show a novel way to turn our blind signature into a partially blind signature, where we deviate from prior methods since they require hashing into the set of public keys while hiding the corresponding secret key—constructing such a hash function in the isogeny setting remains an open problem.

mathematics, applied,computer science, theory & methods
A new multivariate primitive from CCZ equivalence

Marco Calderini,Alessio Caminata,Irene Villa

2024-06-01

Abstract:Multivariate Cryptography is one of the main candidates for Post-quantum Cryptography. Multivariate schemes are usually constructed by applying two secret affine invertible transformations $\mathcal S,\mathcal T$ to a set of multivariate polynomials $\mathcal{F}$ (often quadratic). The secret polynomials $\mathcal{F}$ posses a trapdoor that allows the legitimate user to find a solution of the corresponding system, while the public polynomials $\mathcal G=\mathcal S\circ\mathcal F\circ\mathcal T$ look like random polynomials. The polynomials $\mathcal G$ and $\mathcal F$ are said to be affine equivalent. In this article, we present a more general way of constructing a multivariate scheme by considering the CCZ equivalence, which has been introduced and studied in the context of vectorial Boolean functions.

Cryptography and Security
An Efficient Batch Verifying Scheme for Detecting Illegal Signatures.

Yanli Ren,Shuozhong Wang,Xinpeng Zhang,Min-Shiang Hwang

2015-01-01

Abstract:In a batch verifying scheme, multiple RSA digital signatures can be verified simultaneously in just one exponential operation time. Currently, the verifier could not easily detect where the signature-verification fault was located in most schemes, if the batch verification fails. In this article, we proposed a new batch verifying multiple RSA digital signatures scheme based on a cube. The scheme can detect accurately where the signature-verification fault is located. Moreover, once the total number of signatures is fixed, the size of exponentiation operations is independent from the number of illegal signatures in our scheme. Therefore, our scheme has a better performance and higher efficiency than the previous ones. Finally, we described an extend batch verifying scheme under the condition of n-dimension.
SIGNLINE: Digital signature scheme based on linear equations cryptosystem

Gennady Khalimov,Yevgen Kotukh,Maksym Kolisnyk,Svitlana Khalimova,Oleksandr Sievierinov

2024-05-25

Abstract:The paper explores a novel cryptosystem for digital signatures based on linear equa-tions for logarithmic signatures. A logarithmic signature serves as a fundamental cryptographic primitive, characterized by properties such as nonlinearity, non-commutability, unidirectionality, and key-dependent factorability. The proposed cryptosystem ensures the secrecy of logarithmic signatures through its foundation in linear equations. Quantum security is achieved by eliminating any possible mapping between the input and output of the logarithmic signature, thereby rendering Grover's quantum attack ineffective. The public key sizes for the NIST security levels of 128, 192, and 256 bits are 1, 1.5, and 2 KB, respectively. The algorithm demonstrates scalability concerning computational costs, memory usage, and hardware limitations without compromising security. Its primary operation involves bitwise XOR over logarithmic arrays of 8, 16, 32, and 64 bits.

Cryptography and Security,Information Theory,Group Theory
Discrete signature varieties

Carlo Bellingeri,Raul Penaguiao

2024-10-23

Abstract:Discrete signatures are invariants computed from time series corresponding to the discretised version of the signature of paths. We study the algebraic varieties arising from their images, the discrete signature varieties. We introduce them and compute their dimension in many cases. From a particular subclass of these varieties, we derive a partial solution to the Chen-Chow theorem for complex-valued time series.

Combinatorics,Algebraic Geometry,Probability
An identification system based on the explicit isomorphism problem

Sándor Z. Kiss,Péter Kutas

DOI: https://doi.org/10.48550/arXiv.1812.09130

2021-09-17

Abstract:We propose a new identification system based on algorithmic problems related to computing isomorphisms between central simple algebras. We design a statistical zero knowledge protocol which relies on the hardness of computing isomorphisms between orders in division algebras which generalizes a protocol by Hartung and Schnorr, which relies on the hardness of integral equivalence of quadratic forms.

Rings and Algebras,Cryptography and Security

BASS: Boolean Automorphisms Signature Scheme

A SAT-based Public Key Cryptography Scheme

Digital signature schemes using non-square matrices or scrap automorphisms

An Undeniable Signature Scheme Utilizing Module Lattices

Rainbow, a new multivariable polynomial signature scheme

Signed combinatorial interpretations in algebraic combinatorics

Algebraic properties of the maps

Minimal Axiomatization of Boolean Algebras

VDOO: A Short, Fast, Post-Quantum Multivariate Digital Signature Scheme

On formal verification of arithmetic-based cryptographic primitives

Strong Signature Schemes

A Method for Specifying Complete Signature Randomization and an Algebraic Algorithm Based on It

On the signature of biquotients

From the global signature to higher signatures

Partial Blind-Signature Scheme Based on Bundling Homomorphism

CSI-Otter: isogeny-based (partially) blind signatures from the class group action with a twist

A new multivariate primitive from CCZ equivalence

An Efficient Batch Verifying Scheme for Detecting Illegal Signatures.

SIGNLINE: Digital signature scheme based on linear equations cryptosystem

Discrete signature varieties

An identification system based on the explicit isomorphism problem