Abstract:In this paper, we construct the first provably-secure isogeny-based (partially) blind signature scheme. While at a high level the scheme resembles the Schnorr blind signature, our work does not directly follow from that construction, since isogenies do not offer as rich an algebraic structure. Specifically, our protocol does not fit into the linear identification protocol abstraction introduced by Hauck, Kiltz, and Loss (EUROCYRPT'19), which was used to generically construct Schnorr-like blind signatures based on modules such as classical groups and lattices. Consequently, our scheme is provably secure in the random oracle model (ROM) against poly-logarithmically-many concurrent sessions assuming the subexponential hardness of the group action inverse problem. In more detail, our blind signature exploits the quadratic twist of an elliptic curve in an essential way to endow isogenies with a strictly richer structure than abstract group actions (but still more restrictive than modules). The basic scheme has public key size 128 B and signature size 8 KB under the CSIDH-512 parameter sets—these are the smallest among all provably secure post-quantum secure blind signatures. Relying on a new ring variant of the group action inverse problem ( ), we can halve the signature size to 4 KB while increasing the public key size to 512 B. We provide preliminary cryptanalysis of and show that for certain parameter settings, it is essentially as secure as the standard . Finally, we show a novel way to turn our blind signature into a partially blind signature, where we deviate from prior methods since they require hashing into the set of public keys while hiding the corresponding secret key—constructing such a hash function in the isogeny setting remains an open problem.

Provably Secure Self-Certified Partially Blind Signature Scheme from Bilinear Pairings

New Efficient Certificateless Blind Signature Scheme

A New Certificateless Blind Signature Scheme

Publicly Auditable Conditional Blind Signatures.

Improvement of Provably Secure Self-Certified Proxy Convertible Authenticated Encryption Scheme

Linkability of A Blind Signature Scheme and Its Improved Scheme

Partial Blind-Signature Scheme Based on Bundling Homomorphism

CSI-Otter: isogeny-based (partially) blind signatures from the class group action with a twist

Oblivious Signature-Based Envelope Without Secure Channel

A Fair Off-Line Electronic Cash Scheme Based on Restrictive Partially Blind Signature

Universally Composable Blind Signature Functionality

A Provably-Secure Proxy Signature Scheme from Bilinear Pairings

Blind one-time signature and its applications

Semi-quantum blind double signature scheme with semi-trusted arbitrator

An attack on undeniable partially blind signatures

An Efficient Fair Off-Line Electronic Cash Scheme Design

A Strong RSA Signature Scheme and Its Application

ON THE SECURITY OF A PAIRING-BASED SIGNCRYPTION SCHEME USING SELF-CERTIFIED PUBLIC KEYS

An Efficient Code‐Based One‐Time Blind Signature Scheme for Electronic Forensics

Certificateless Two-Party Authenticated Key Agreement Protocol Based on Bilinear Pairings