Abstract:Linearly homomorphic signature (LHS) allows the acquisition of a new legal signature using the homomorphic operation of the original signatures. However, the public composability of LHS also prevents it from being used in some scenarios where the combiner needs to be designated. The LZZ22 scheme designates a combiner and preserves the signature structure by having the signer and the designated combiner share a secret. However, LZZ22 is not secure enough because the secret is constant. Here, we first prove that there is a polynomial time adversary that can crack the secret in LZZ22 through multiple signature queries. Then, we propose a new scheme, which realizes all the functions of LZZ22 and fixes the security problem by changing the secret with the message. The proposed scheme is shown to be secure against existential forgery on adaptively chosen subspace attacks under the random oracle model. Finally, we detail how to apply our scheme to the proxy signature and perform it on a personal computer, and the results show that our scheme is efficient.

Linearly Homomorphic Signature with Tight Security on Lattice

Lattice-Based Linearly Homomorphic Signature Scheme over F 2

Efficient Lattice-Based Ring Signature Scheme

An efficient certificateless signature scheme on lattice

Leveled Fully Homomorphic Signatures Based on Standard Lattices

A structure-preserving linearly homomorphic signature scheme with designated combiner

Identity-based Signatures from Lattices

Efficient and Strongly Unforgeable Identity-Based Signature Scheme from Lattices in the Standard Model.

Improvement of a Lattice-based Signature Scheme

Certificateless and certificate-based signatures from lattices: Certificateless and certificate-based signatures from lattices

Identity-Based Signatures From Lattices: Simpler, Faster, Shorter

On the Security of a Lattice-Based Multi-party Concurrent Signature Scheme

Efficient Forward Secure Identity-Based Shorter Signature from Lattice.

Lattice-Based Linkable Ring Signature in the Standard Model.

Efficient Hierarchical Identity-Based Signatures from Lattices

Short Identity-Based Signatures with Tight Security from Lattices

Tightly Secure Signature Schemes from the LWE and Subset Sum Assumptions

Lattice-based Concurrent Signatures in the Standard Model

Efficient Certificateless Signature Scheme on NTRU Lattice.

A New Hierarchical Identity-based Signature Scheme from Lattices in the Standard Model.

An Attack on $p$-adic Lattice Public-key Cryptosystems and Signature Schemes