Shorter Verifier-Local Revocation Group Signatures from Bilinear Maps

Sujing Zhou,Dongdai Lin

DOI: https://doi.org/10.1007/11935070_8

2006-01-01

Abstract:We propose a new computational complexity assumption from bilinear map, based on which we construct Verifier-Local Revocation group signatures with shorter lengths than previous ones.

What problem does this paper attempt to address?

Shorter Verifier-Local Revocation Group Signature with Backward Unlinkability.

Lingbo Wei,Jianwei Liu

DOI: https://doi.org/10.1007/978-3-642-17455-1_9

2010-01-01

Abstract:Used as the privacy-preserving attestation by Trusted Computing effort (TCG) or the privacy-preserving authentication protocol in vehicular ad hoc networks (VANETs), group signature becomes more important than ever. Membership revocation is a delicate issue in group signatures. Verifier-local revocation (VLR) is a reasonable resolution, especially for mobile environments. Back unlinkability (BU) is a currently introduced security property providing further privacy. Based on the Decision Linear (DLIN) assumption and the q -Strong Diffie-Hellman ( q - SDH) assumption, a new BU-VLR group signature scheme is proposed, which has the shortest signature size and smallest computation overhead among the previous BU-VLR group signature schemes.
A Shorter Group Signature with Verifler-Location Revocation and Backward Unlinkability

Zhou Sujing,Lin Dongdai

2006-01-01

Abstract:Group signatures are generalized credential/member authentication schemes with wide ap- plications, such as Trust Computing. Membership revocation problem is a major issue of group signatures. In some applications that group secret keys are stored in tamper resistant chips, a Verifler-Local Revocation resolution is more reasonable than other methods, such as witness based revocation. Boneh et al. formally deflned such VLR group signatures and proposed a VLR resolution for a short group signature. Later Nakanishi et al. pointed out it has a disadvantage of backward linkability, and provided a VLR resolution with backward unlinkability at the cost of longer signature size and more computation. We improve Nakanishi et al.'s scheme by reducing the signature size and computations required, without compromising VLR and backward unlinkability.
Simpler Efficient Group Signature Scheme with Verifier-Local Revocation from Lattices.

Yanhua Zhang,Yupu Hu,Wen Gao,Mingming Jiang

DOI: https://doi.org/10.3837/tiis.2016.01.024

2016-01-01

KSII Transactions on Internet and Information Systems

Abstract:Verifier-local revocation (VLR) seems to be the most flexible revocation approaches for any group signature scheme, because it just only requires the verifiers to possess some up-to-date revocation information, but not the signers. Langlois et al. (PKC 2014) proposed the first VLR group signature based on lattice assumptions in the random oracle model. Their scheme has at least (O) over tilde (n(2)).log N bit group public key and (O) over tilde (n).log N. bit signature, respectively. Here, n is the security parameter and N is the maximum number of group members. In this paper, we present a simpler lattice-based VLR group signature, which is more efficient by a(log) ONfactor in both the group public key and the signature size. The security of our VLR group signature can be reduced to the hardness of learning with errors (LWE) and small integer solution (SIS) in the random oracle model.
Efficient verifier-local revocation group signature schemes with backward unlinkability

Lingbo Wei,ChuanKun Wu,Sujing Zhou

IF: 1.019

2009-01-01

Chinese Journal of Electronics

Abstract:Membership revocation is a delicate issue of group signature. Verifier-local revocation (VLR) is a reasonable resolution, especially for mobile environments. Based on the IDDH and q-SDH assumption, we propose a new VLR group signature scheme with Backward unlink-ability (BU). It has shortest signature size and smallest computation overhead among the previous BU-VLR group signature schemes. Then, we extend our scheme to gain non-frameability.
Hierarchical Group Signatures with Verifier-Local Revocation

Lin Hou,Renzhang Liu,Tian Qiu,Dongdai Lin

DOI: https://doi.org/10.1007/978-3-030-01950-1_16

2018-01-01

Abstract:Group signatures are important when it comes to authentication with privacy. Hierarchical group signatures, as a proper generalization of group signatures, have splendid applications in e-commerce. One key issue for such schemes is to support membership revocation in an efficient as well as secure way. To this end, the notion of group signatures with verifier-local revocation was proposed and well-studied, where the revocation messages are sent only to verifiers. However, such issue has not been formally studied in the context of hierarchical group signatures. In this paper, we raise and formalize the new notion of hierarchical group signatures with verifier-local revocation, and propose a semi-generic construction from group signatures with verifier-local revocation. When instantiating it with a variant of the group signature scheme proposed by Gordon, Katz and Vaikuntanathan, a lattice-based construction is implicitly given.
Lattice-based group signature with verifier-local revocation

Wen Gao,Yupu Hu,Yanhua Zhang,Baocang Wang

DOI: https://doi.org/10.1007/s12204-017-1837-1

2017-05-30

Journal of Shanghai Jiaotong University (Science)

Abstract:Among several post quantum primitives proposed in the past few decades, lattice-based cryptography is considered as the most promising one, due to its underlying rich combinatorial structure, and the worst-case to average-case reductions. The first lattice-based group signature scheme with verifier-local revocation (VLR) is treated as the first quantum-resistant scheme supported member revocation, and was put forward by Langlois et al. This VLR group signature (VLR-GS) has group public key size of O(nm log N log q), and a signature size of O(tm logN log q log β). Nguyen et al. constructed a simple efficient group signature from lattice, with significant advantages in bit-size of both the group public key and the signature. Based on their work, we present a VLR-GS scheme with group public key size of O(nm log q) and signature size of O(tm log q). Our group signature has notable advantages: support of membership revocation, and short in both the public key size and the signature size.
Transitive Signatures Based on Bilinear Maps

Changshe Ma,Kefei Chen,Shengli Liu,Dong Zheng

DOI: https://doi.org/10.5220/0002542700480056

2005-01-01

Abstract:The notion of transitive signature, firstly introduced by Micali and Rivest, is a way to digitally sign the vertices and edges of a dynamically growing, transitively closed graph. All the previous proposed transitive signature schemes were constructed from discrete logarithm, factoring, or RSA assumption. In this paper, we introduce two alternative realizations of transitive signature based on bilinear maps. The proposed transitive signature schemes possess the following properties: (i) they are provably secure against adaptive chosen-message attacks in the random oracle model; (ii) there are no need for node certificates in our transitive signature schemes, so the signature algebra is compact; (iii) if using Weil pairing, our signature schemes are more efficient than all previous proposed schemes.
Post-quantum Secure Group Signature with Verifier Local Revocation and Backward Unlinkability

Shuaining Gao,Xinjian Chen,Hongbo Li,Willy Susilo,Qiong Huang

DOI: https://doi.org/10.1016/j.csi.2023.103782

IF: 3.721

2024-01-01

Computer Standards & Interfaces

Abstract:Group signature supports users to generate signatures on behalf of the group. Verifier local revocation (VLR) is an important method to revoke a misbehaving user in group signature, which has attracted many researchers’ attention. However, the existing lattice-based group signature schemes with VLR either achieve only selfless anonymity, have revocation list of size linear with the number of revoked users, or suffer from the issue that signatures generated by revoked users could easily be linked by an adversary. Additionally, the development of quantum computing technology threatens the security of traditional cryptosystems. Therefore, in this paper we propose a new lattice-based group signature scheme, which makes use of the complete tree technique to combine the timestamp with VLR. It enjoys post-quantum security and satisfies almost full anonymity and traceability if the LWE and SIS problems are hard. Compared with previous schemes, our scheme achieves backward unlinkability additionally. Thanks to the revocation token update mechanism, a revocation token for time period t could not be connected with signatures generated in period t+1. Furthermore, the revocation list in our scheme only stores the tokens of users who have been revoked before the expiry, reducing the revocation list size effectively.
Practical Certificateless Aggregate Signatures from Bilinear Maps

Zheng Gong,Yu Long,Xuan Hong,Kefei Chen

2008-01-01

Abstract:Aggregate signature is a digital signature with a striking property that anyone can aggregate n individual signatures on n different messages which are signed by n distinct signers, into a single compact signature to reduce computational and storage costs. In this work, two practical certificateless aggregate signature schemes are proposed from bilinear maps. The first scheme CAS-1 reduces the costs of communication and signer-side computation but trades off the storage, while CAS-2 minimizes the storage but sacrifices the communication costs. One can choose either of the schemes by consideration of the application requirement. Compare with ID-based schemes, our schemes do not entail public key certificates as well and achieve the trust Level 3, which imply the frauds of the authority are detectable. Both of the schemes are proven secure in the random oracle model by assuming the intractability of the computational Diffie-Hellman problem over the groups with bilinear maps, where the forking lemma technique is avoided.
Lattice-Based Universal Designated Verifier Signatures

BaoHong Li,YanZhi Liu,Sai Yang

DOI: https://doi.org/10.1109/icebe.2018.00062

2018-01-01

Abstract:Universal designated verifier signatures can be used to resolve the conflict between authenticity and privacy in some applications. However, all of existing constructions for this primitive are based on hard problems in number theory, and will be ultimately broken in quantum era. To address this issue, we construct the first lattice-based universal designated verifier signatures as a post-quantum candidate for this primitive. Our construction is obtained by directly extending a ring-based variant of the Gentry-Peikert-Vaikuntanathan signature scheme with some additional algorithms, thus the existing key generation and signing implementation can be used without modification. We also show that our construction is provably secure under the Small Integer Solution problem over rings, in the random oracle model.
An Efficient Batch Verifying Scheme for Detecting Illegal Signatures.

Yanli Ren,Shuozhong Wang,Xinpeng Zhang,Min-Shiang Hwang

2015-01-01

Abstract:In a batch verifying scheme, multiple RSA digital signatures can be verified simultaneously in just one exponential operation time. Currently, the verifier could not easily detect where the signature-verification fault was located in most schemes, if the batch verification fails. In this article, we proposed a new batch verifying multiple RSA digital signatures scheme based on a cube. The scheme can detect accurately where the signature-verification fault is located. Moreover, once the total number of signatures is fixed, the size of exponentiation operations is independent from the number of illegal signatures in our scheme. Therefore, our scheme has a better performance and higher efficiency than the previous ones. Finally, we described an extend batch verifying scheme under the condition of n-dimension.
Group Signatures with Probabilistic Revocation

Vireshwar Kumar,He Li,Jung-Min (Jerry) Park,Kaigui Bian,Yaling Yang

DOI: https://doi.org/10.1145/2810103.2813602

2015-01-01

Abstract:Group signatures (GSs) is an elegant approach for providing privacy-preserving authentication. Unfortunately, modern GS schemes have limited practical value for use in large networks due to the high computational complexity of their revocation check procedures. We propose a novel GS scheme called the Group Signatures with Probabilistic Revocation (GSPR), which significantly improves scalability with regard to revocation. GSPR employs the novel notion of probabilistic revocation, which enables the verifier to check the revocation status of the private key of a given signature very efficiently. However, GSPR's revocation check procedure produces probabilistic results, which may include false positive results but no false negative results. GSPR includes a procedure that can be used to iteratively decrease the probability of false positives. GSPR makes an advantageous tradeoff between computational complexity and communication overhead, resulting in a GS scheme that offers a number of practical advantages over the prior art. We provide a proof of security for GSPR in the random oracle model using the decisional linear assumption and the bilinear strong Diffie-Hellman assumption.
Improvements on Non-Interactive Zero-Knowledge Proof Systems Related to Quadratic Residuosity Languages.

Wei Liu,Jian Weng,Bingsheng Zhang,Kai He,Junjie Huang

DOI: https://doi.org/10.1016/j.ins.2022.09.026

IF: 8.1

2022-01-01

Information Sciences

Abstract:Non-interactive zero-knowledge (NIZK) proof systems are very useful for statement verification without interaction in cryptography; they entail just one message, called the proof, that convinces the verifier of the truth of the statement without leaking any extra information. Many NIZK proof systems are related to quadratic residuosity languages and follow three main steps. First, the prover and the verifier sample a common reference string (CRS) in some particular form. Second, the prover proves that n is a Blum integer (BL , n = p 1 t 1 · p 2 t 2, where p 1 and p 2 are different primes both congruent to 3 modulo 4, and t 1 and t 2 are odd). Third, various statements (e.g., NQR n , OR n , AND n , T ( k , t ), and 3 SAT) can be proven by the prover based on the properties of BL . In this study, we improve the NIZK proof system for n ∈ BL based on the special distribution of the square roots modulo n and embed this proof in the third step. Moreover, we show that the CRS can be sampled more efficiently using the improved process.
New Efficient Certificateless Blind Signature Scheme

Haibin Chen,Lei Zhang,Junyuan Xie,Chongjun Wang

DOI: https://doi.org/10.1109/TrustCom.2016.82

2016-01-01

Abstract:As a new paradigm, certificateless public key cryptography was introduced by AI-Riyami and Paterson. It resolves the high cost of certificate in the traditional public key cryptography and the inherent key escrow problem in the identity-based cryptography. Due to the advantages of certificateless public key cryptography, a new efficient certificateless blind signature scheme from bilinear maps is proposed, which requires less computational effort by comparing with previous constructions. The number of pairing operations in the signing and verification phase of our scheme is only one. This is probably the best to achieve in pairing based signature schemes. Furthermore, we show that the proposed scheme is provably secure in the random oracle model. The security of our scheme is proven based on the hardness of q-Strong Diffie-Hellman problem and the Inverse Computational Diffie-Hellman problem.
Security Analysis of Some Batch Verifying Signatures from Pairings.

Tianjie Cao,Dongdai Lin,Rui Xue

DOI: https://doi.org/10.6633/ijns.200609.3(2).05

2006-01-01

Abstract:Batch verification can provide large computational savings when multiple signatures are verified together. Recently, some batch verifying signature schemes have been proposed from bilinear pairings. In this paper, we show that an attacker can cheat a verifier to accept invalid signatures in these batch verifying schemes. We also show that randomized batch verification technique can be used to avoid these attacks.
An Efficient Certificateless Designated Verifier Signature Scheme.

Debiao He,Jianhua Chen

2013-01-01

The International Arab Journal of Information Technology

Abstract:To solve the key escrow problem in identity-based cryptosystem, Al-Riyami et al. introduced the CertificateLess Public Key Cryptography (CL-PKC). As an important cryptographic primitive, CertificateLess Designated Verifier Signature (CLDVS) scheme was studied widely. Following Al-Riyami et al. work, many certificateless Designated Verifier Signature (DVS) schemes using bilinear pairings have been proposed. But the relative computation cost of the pairing is approximately twenty times higher than that of the scalar multiplication over elliptic curve group. In order to improve the performance we propose a certificateless DVS scheme without bilinear pairings. With the running time of the signature being saved greatly, our scheme is more practical than the previous related schemes for practical application.
Efficient and Provably Secure Certificateless Signature from Bilinear Pairings

HE Ming-xing,LI Peng-cheng,LI Xiao

DOI: https://doi.org/10.3969/j.issn.1001-0548.2015.06.016

2015-01-01

Abstract:Certificateless cryptography aims at combining the advantages of identity based and traditional certificate-based public key cryptography, so as to avoid the key escrow problem inherent in the identity based system and certificate management in public key infrastructure. In this paper, we propose a new efficient certificateless signature scheme and prove its security in the random oracle model. Furthermore, via pre-computing a bilinear pairing in the setup phase, our scheme only needs to compute one pairing in the verify stage. It is more efficient in computation complexity and communication complexity than that of many previous schemes.
Research on the Encryption and Digital Signatures in Remote Attestation from Elliptic Curve Group

Ting Chen,Huiqun Yu

DOI: https://doi.org/10.12785/amis/070314

2013-01-01

Applied Mathematics & Information Sciences

Abstract:Bilinear pairings based on the Weil and Tate pairings over elliptic curves have been applied for constructive applications in cryptography protocol for years. Most protocol can be proved to be simplified or expanded using the mathematical structures of different types of pairings. In this paper, we applied parings to a remote attestation model, namely cloud based remote attestation(CBA). We give all the detailed algorithms of it and it can guarantee the private of cloud service and solve authorization auditing mechanisms in cloud environment. The bilinear pair can shorten the required key length and reduced bandwidth usage. It meets the requirements of the trusted computing remote attestation and cloud environment at the same time and the virtual TPM structure fulfills the need of standard cloud computing secure measure, such as duty separation. What's more, we prove the scheme is correct and secure under the LRSW assumption, and give the costs comparison between the classic remote attestation, BPBA and CBA which show CBA costs lowly.
A Server-Aided Aggregate Verification Signature Scheme from Bilinear Pairing

Huai Wu,Chunxiang Xu,Jiang Deng

DOI: https://doi.org/10.1109/INCoS.2013.95

2013-01-01

Abstract:Fast signature verification is desirable in many applications, especially for numerous low computation scenarios such as RFID, wireless network. Up to now, many techniques have been suggested to reduce the computational load. For example, server-aided verification aims at saving computational overhead and aggregated signatures have been used for saving the bandwidth by compressing a list of signatures into a single signature. Therefore, it is interesting to study how to combine these two tricks together, namely server-aided aggregate verification signature, to achieve both short signature length and secure server-aided verification. The contribution of this paper is three folds. Firstly, we formalize a new security model of server-aided aggregate verification signature scheme (SAAV-?). Secondly, we propose a concrete server-aided aggregate verification signature scheme based BGLS signature scheme. Finally, we show that our construction is secure in our model.
Chain Verification Signature Based on Elliptic Curve

Xiuyi Jia

2009-01-01

Abstract:Based on elliptic curve cryptosystem,a new chain verification signature scheme is proposed,the verifier doesn't verify the validity of the signature until authorized in turn by members of the chain verification authorize group.Authorizers can be added or deleted conveniently.In addition,the proposed scheme can be protected in time when sub-secrets are leaked by verifiers or authorizers.Furthermore,the computing complexity of the proposed scheme is analyzed.It is more secure and efficient than that of discrete logarithm schemes.

Shorter Verifier-Local Revocation Group Signatures from Bilinear Maps

Shorter Verifier-Local Revocation Group Signature with Backward Unlinkability.

A Shorter Group Signature with Verifler-Location Revocation and Backward Unlinkability

Simpler Efficient Group Signature Scheme with Verifier-Local Revocation from Lattices.

Efficient verifier-local revocation group signature schemes with backward unlinkability

Hierarchical Group Signatures with Verifier-Local Revocation

Lattice-based group signature with verifier-local revocation

Transitive Signatures Based on Bilinear Maps

Post-quantum Secure Group Signature with Verifier Local Revocation and Backward Unlinkability

Practical Certificateless Aggregate Signatures from Bilinear Maps

Lattice-Based Universal Designated Verifier Signatures

An Efficient Batch Verifying Scheme for Detecting Illegal Signatures.

Group Signatures with Probabilistic Revocation

Improvements on Non-Interactive Zero-Knowledge Proof Systems Related to Quadratic Residuosity Languages.

New Efficient Certificateless Blind Signature Scheme

Security Analysis of Some Batch Verifying Signatures from Pairings.

An Efficient Certificateless Designated Verifier Signature Scheme.

Efficient and Provably Secure Certificateless Signature from Bilinear Pairings

Research on the Encryption and Digital Signatures in Remote Attestation from Elliptic Curve Group

A Server-Aided Aggregate Verification Signature Scheme from Bilinear Pairing

Chain Verification Signature Based on Elliptic Curve