Abstract:Fair exchange protocols aim to allow two parties to exchange digital items in a fair manner. Optimistic fair exchange (OFE) is a kind of protocols that solves the fair exchange problem with the help of a trusted third party (TTP), usually referred to as an ‘arbitrator’. The participation of the arbitrator is only required when there is a dispute between the exchanging parties. In the literature, the highest level of security of optimistic fair exchange is the multi-user security in the chosen-key model, proposed by Huang, Yang, Wong and Susilo in CT-RSA 2008. They showed that an efficient optimistic fair exchange scheme, secure in this sense, can be constructed generically from a conventional signature and a ring signature. In particular, the underlying ring signature is required to be unforgeable under an adaptive attack, against a static adversary in the 2-user setting. Concurrent signatures, introduced by Chen, Kudla and Paterson in Eurocrypt 2004, allow two parties to produce two ambiguous signatures until an extra piece of information, the keystone, is released by one of the parties. Upon the release of the keystone, the ambiguity will be revoked and the signatures bind to their true signers concurrently. Concurrent signatures, however, are known to fall just short of fully solving the long standing fair exchange of signatures problem. The price for not requiring any TTP is that the party who holds the keystone always has an advantage over the other party in controlling when and whether the protocol completes or not. In this thesis, the fair exchange of digital signatures problem is studied. In the first part of this thesis, the OFE security is strengthened and a more practical model which is called enhanced chosen-key model is proposed. Unlike the existing multiuser setting and chosen-key model, an adversary in the enhanced chosen-key model is further provided with the signing oracle that outputs full signatures generated by the signer, and may even be allowed to have access to the arbitrator’s secret key. The necessity for the new model is demonstrated. It is shown that two existing

1-out-of-n Oblivious Signatures: Security Revisited and a Generic Construction with an Efficient Communication Cost

Generic Construction of 1-out-of-n Oblivious Signatures

Oblivious Signature-Based Envelope Without Secure Channel

Provably secure 1-out-of-n Oblivious Transfer scheme

Simulatable Adaptive Oblivious Transfer with Statistical Receiver’s Privacy

Cryptanalysis and Improvement of a K-out-of-n Oblivious Transfer Protocol.

An Efficient Certificateless Signature Scheme With Provably Security and Its Applications

Oblivious Transfer Based on NTRUEncrypt

CSI-Otter: isogeny-based (partially) blind signatures from the class group action with a twist

Endemic Oblivious Transfer Via Random Oracles, Revisited.

Contributions on Fair Exchange of Digital Signatures

One-out-of-Many Unclonable Cryptography: Definitions, Constructions, and More

Blind Spontaneous Anonymous Group Signatures for Ad Hoc Groups

One-Wayness in Quantum Cryptography

Id-Based Restrictive Partially Blind Signatures And Applications

Unconditionally Secure Quantum m-out-of-n Oblivious Transfer

New Certificateless Short Signature Scheme

A Post-Quantum Light Weight 1-out-n Oblivious Transfer Protocol

A Strong RSA Signature Scheme and Its Application

On the Security of an Enhanced Signature Scheme

Certificateless Signature: a New Security Model and an Improved Generic Construction