Abstract:In a 1-out-of -n oblivious signature scheme, a user pro-vides a set of messages to a signer for signatures but he/she can only obtain a valid signature for a specific message chosen from the message set. There are two security requirements for 1-out-of -n oblivious signature. The first is ambiguity, which requires that the signer is not aware which message among the set is signed. The other one is unforgeability which requires that the user is not able to derive any other valid signature for any messages beyond the one that he/she has chosen. In this paper, we provide a generic construction of 1-out-of -n oblivious signature. Our generic construction consists of two building blocks, a commitment scheme and a standard signature scheme. Our construction is round efficient since it only asks one interaction (i.e., two rounds) between the user and signer. Meanwhile, in our construction, the ambiguity of the 1-out-of -n oblivious signature scheme is based on the hiding property of the underlying commitment, while the unforgeability is based on the binding property of the underlying commitment scheme and the unforgeability of the underlying signature scheme. Moreover, our construction can also enjoy strong unforgeability as long as the underlying building blocks have strong binding property and strong unforgeability respectively. Given the fact that commitment and digital signature are well-studied topics in cryptography and numerous concrete schemes have been proposed in the standard model, our generic construc-tion immediately yields a bunch of instantiations in the standard model based on well-known assumptions, including not only traditional assump-tions like Decision Diffie-Hellman (DDH), Decision Composite Residue (DCR), etc., but also some post-quantum assumption like Learning with Errors (LWE). As far as we know, our construction admits the first 1-out -of -n oblivious signature schemes based on the standard model.

ID-Based Adaptive Oblivious Transfer

Simulatable Adaptive Oblivious Transfer with Statistical Receiver’s Privacy

Timed-release oblivious transfer

Oblivious Signature-Based Envelope Without Secure Channel

Anonymous Oblivious Transfer

Cut-and-Choose Bilateral Oblivious Transfer and Its Application

Oblivious Blind Rendezvous for Anonymous Users

Practical Fully Simulatable Oblivious Transfer with Sublinear Communication.

A Novel Oblivious Transfer Protocol with Statistical Analysis

An Efficient Single Server-Aided K-out-of-n Oblivious Transfer Protocol

Oblivious Transfer Protocols Based on Group Factoring Problem.

Id-Based Restrictive Partially Blind Signatures And Applications

Id-Based Restrictive Partially Blind Signatures

Oblivious Transfer Based on NTRUEncrypt

Cryptanalysis and Improvement of a K-out-of-n Oblivious Transfer Protocol.

Secure Identification in The Isolated Qubits Model

Toward Wireless Security Without Computational Assumptions—Oblivious Transfer Based on Wireless Channel Characteristics

Round-Efficient Oblivious Database Manipulation

ID-based Threshold Decryption Secure Against Adaptive Chosen-Ciphertext Attack.

Generic Construction of 1-out-of-n Oblivious Signatures

Unconditionally Secure Quantum Oblivious Transfer