Security of DSA type batch verification protocols

Zichen Li,Zhongxian Li,Yixian Yang

IF: 1.019

1999-01-01

Chinese Journal of Electronics

Abstract:Recently, Harn proposed DSA type interactive and non-interactive batch verification protocols. In this paper, the authors show that these batch verification protocols are not secure.

What problem does this paper attempt to address?

Security Analysis of Some Batch Verifying Signatures from Pairings.

Tianjie Cao,Dongdai Lin,Rui Xue

DOI: https://doi.org/10.6633/ijns.200609.3(2).05

2006-01-01

Abstract:Batch verification can provide large computational savings when multiple signatures are verified together. Recently, some batch verifying signature schemes have been proposed from bilinear pairings. In this paper, we show that an attacker can cheat a verifier to accept invalid signatures in these batch verifying schemes. We also show that randomized batch verification technique can be used to avoid these attacks.
Notes Onsecurity Proof of Digital Signature Scheme

QI Ya-ping,LIU Wen-hua,YU Yong

DOI: https://doi.org/10.3321/j.issn:1002-8331.2007.24.034

2007-01-01

Abstract:Recently,Willy、Zhang and Yi proposed an identity-based strong designated verifier signature scheme(noted as WZY scheme) and gave the security proof of the scheme.Unfortunately,We find that their security proof is improper:in the proof of the unforgeability of the scheme,they supposed that the adversary has the secret key of the designated verifier.Under a simple assumption that the hash function is considered as an oracle that on each valid input known to the adversary beforehand produces a random value,a new proof that the unforgeability of WZY scheme relies on the Bilinear Diffie-Hellman Problem is given.
Optimized MHealth Batch Verification for a Variant of DSA

Angolo Shem Mbandu,Chunxiang Xu,Kamenyi Domenic Mutiria

DOI: https://doi.org/10.1109/CyberC.2014.22

2014-01-01

Abstract:With more and more research focusing on Health Care services, there is need for efficient authentication by use of digital signatures. Currently, the DSA is one of the most commonly used digital signature scheme. This paper proposes an Optimized Health Batch Verification Scheme on a variant of DSA. The proposed system is based on a new optimal DSA-type digital signature scheme, which is also proposed in this paper. Our scheme makes use of Small Exponents Test and Bucket Test subroutines for optimization. Performance evaluation shows that our scheme is significantly more efficient in batch verification of digital signatures, making it suitable for Health applications. The Scheme is secure against authentication threats, message integrity threats and replay attack threats.
Cryptanalysis of Strong Designated Verifier Signature Scheme with Non-delegatability and Non-transferability

Mingwu Zhang,Tsuyoshi Takagi,Bo Yang,Fagen Li

DOI: https://doi.org/10.1587/transfun.e95.a.259

2012-01-01

Abstract:Strong designated verifier signature scheme (SDVS) allows a verifier to privately check the validity of a signature. Recently, Huang et al. first constructed an identity-based SDVS scheme (HYWS) in a stronger security model with non-interactive proof of knowledge, which holds the security properties of unforgeability, non-transferability, non-delegatability, and privacy of signer's identity. In this paper, we show that their scheme does not provide the claimed properties. Our analysis indicates that HYWS scheme neither resist on the designated verifier signature forgery nor provide simulation indistinguishability, which violates the security properties of unforgeability, non-delegatability and non-transferability.
An Efficient Batch Verifying Scheme for Detecting Illegal Signatures.

Yanli Ren,Shuozhong Wang,Xinpeng Zhang,Min-Shiang Hwang

2015-01-01

Abstract:In a batch verifying scheme, multiple RSA digital signatures can be verified simultaneously in just one exponential operation time. Currently, the verifier could not easily detect where the signature-verification fault was located in most schemes, if the batch verification fails. In this article, we proposed a new batch verifying multiple RSA digital signatures scheme based on a cube. The scheme can detect accurately where the signature-verification fault is located. Moreover, once the total number of signatures is fixed, the size of exponentiation operations is independent from the number of illegal signatures in our scheme. Therefore, our scheme has a better performance and higher efficiency than the previous ones. Finally, we described an extend batch verifying scheme under the condition of n-dimension.
Security analysis of verifiably encrypted signature scheme

XIA Qi,XU Chun-xiang

2009-01-01

Abstract:The security of Yang et al. verifiably encrypted signature schemes is analyzed.Although the scheme is proved security in the standard model,it is vulnerable to key substitution attack in a multi-user setting,where an adversary can generate new keys satisfying legitimate verifiably encrypted signatures created by the legitimate users.A concrete instance of fair exchange of digital signature protocol is given to show that this kind attack can breach the fairness when they are used in fair exchange in a multi-user setting.
A Reduction of Security Notions in Designated Confirmer Signatures

Yingjie Xia,Xuejiao Liu,Fubiao Xia,Guilin Wang

DOI: https://doi.org/10.1016/j.tcs.2015.12.025

IF: 1.002

2016-01-01

Theoretical Computer Science

Abstract:Since the invention of designated confirmer signatures (DCS), a number of schemes with various properties and different underlying mathematical problems have been developed. Although a considerable amount of work has been dedicated to the design of DCS schemes, the confusions of the security notions in the existing DCS models have not been formally discussed and clarified to achieve a proper level of confirmer's security. In order to achieve provable security, we propose a reduced security model and prove that a DCS cryptosystem only requires transcript-simulatability or alternatively invisibility plus non-transferability from a modelling perspective. Accompanied by the reduced DCS model, a generic DCS scheme is also constructed that still retains the feature of full verification, i.e., either the signer or the confirmer can interactively verify arbitrary signatures by providing a convincing proof. Our proposed scheme employs a computationally binding commitment scheme, together with an IND-CCA2 secure public encryption scheme, to achieve a provable security in the standard model. Meanwhile, we present an efficient concrete instantiation by using BLS signatures, CS-Paillier encryption scheme with labels, and Perdesen commitment scheme.
Secure Order-Specified Multisignature Scheme Based on DSA

Yang Muxiang,Su Li,Li Jun,Hong Fan

DOI: https://doi.org/10.1007/bf02831833

2006-01-01

Wuhan University Journal of Natural Sciences

Abstract:In multisignature schemes signers can sign either in a linear order or not in any specified order, but neither of them is adequate in some scenarios where require mixture using of orderless and ordered multisignature. Most order-specified multisignatures specified the orders as linear ones. In this paper, we proposed an order-specified multisignature scheme based on DSA secure against active insider attack. To our knowledge, it is the first order-specified multisignature shceme based on DSA signature scheme, in which signers can sign in flexible order represented by series-parallel graphs. In the multisignature scheme verification to both signers and signing order are available. The security of the scheme is proved by reduce to an identification scheme that is proved have some concrete security. The running time of verifying a signature is comparable to previous schemes while the running time of multisignature generation and the space needed is less than those schemes.
Delegatability of Designated Verifier Signature

Yongjian Liao,Zhiguang Qin

DOI: https://doi.org/10.1109/iccis.2008.4670894

2008-01-01

Abstract:There are only two possible signers in designated verifier signature(DVS) scheme, thus anyone else can not know who is the real signer according to signature/message pairs. Lipmaa et al. discovered delegatability attack on almost all existing designated verifier signature according to original definition of DVS, and later Li et al. subdivided the delegation and defined verifier-only delegatability. Here, we point out the formal definition of verifier-only delegatability is not reasonable and redefine it. Meanwhile we show ZFI DVS scheme is not verifier-only delegatable, but is delegatable, and show ZJ DVS scheme is verifier-only delegatable scheme. We present notion of signer-only delegatability and put forward general construction from verifier-only delegatable DVS scheme to signer-only delegatable DVS scheme, vice verse. We using ZJ DVS scheme as example to show how to construct signer-only delegatable scheme. Finally we classify delegatable DVS scheme into both signer and designated verifier delegatable scheme, verifier-only delegatable scheme and signer-only scheme.
An Effective Verifiable Database Protocol in Severe Untrusted Environment

Aixin Zhang,Shalin Huang,Xinghua Wu,Shilin Wang,Jianhua Li

DOI: https://doi.org/10.1109/CSCloud/EdgeCom.2018.00011

2018-01-01

Abstract:The security of outsourced data has been a key issue in cloud applications. Previous researches have focused on the remote data auditing and verification schemes. Although some of them have the properties of dynamic update and public audit, most of these schemes implicitly assume an honest client. Actually, the client has the motivations to corrupt the verification results against server, and the server may suspect the verification results under the situation where the client is dishonest. Up to now, few solutions have been proposed when both the client and server are not fully trusted and either side could be malicious. In this paper, a strict verifiable database (sVDB) protocol is proposed to tackle this problem. The concrete construction based on the bilinear pair technique can support client's real-time query and batch update operations. We prove the security of the scheme by contradiction under the square computational Diffie-Hellman assumption. We also implement the protocol and carry out several experiments to compare its performance with the state-of-the-art VDB scheme using vector commitment. All the results show that the proposed sVDB scheme achieves good security performance and high computation efficiency.
Cryptanalysis of a Certificateless Aggregate Signature Scheme with Efficient Verification

Han Shen,Jianhua Chen,Jian Shen,Debiao He

DOI: https://doi.org/10.1002/sec.1480

IF: 1.968

2016-01-01

Security and Communication Networks

Abstract:Recently, Chen et al. proposed a certificateless aggregate signature scheme with efficient verification. They claimed that their scheme could resist attacks of Type I adversary and Type II adversary. Unfortunately, we present a universal attack to demonstrate that their scheme cannot provide unforgeability. The adversary in the proposed attack can forge a legal signature on any message without any users' secret information. Copyright © 2016 John Wiley & Sons, Ltd.
On the security of two server-aided verification signature schemes

Huai Wu,Chunxiang Xu,Jiang Deng,Jianbing Ni

2013-01-01

Journal of Computational Information Systems

Abstract:The technique of server-aided verification helps to speed up the verification of a digital signature. This is highly desirable for many low computation applications such as RFID, wireless network. Recently, Wu et al. proposed two server-aided verification signature schemes based on Waters signature. Unfortunately, we demonstrate that the two schemes are vulnerable to collusion attacks by giving concrete security analysis. Copyright © 2013 Binary Information Press.
A Certificateless Strong Designated Verifier Signature Scheme with Non-delegatability.

Yang Chen,Yang Zhao,Hu Xiong,Feng Yue

DOI: https://doi.org/10.6633/ijns.201707.19(4).10

2017-01-01

Abstract:The designated verifier signature only enables the designated verifier to check the correctness of the signature, while any third party can not verify whether this signature is valid or not. Most of the previous designated verifier signature schemes depend on certificate-based cryptography or identity-based cryptography, while little attention has been paid to the certificateless designated verifier signature scheme which has much more advantages than the previous constructions. In this paper, we propose the first certificateless strong designated verifier signature scheme with non-delegatability. We show that our scheme satisfies the basic properties of a designated verifier signature scheme and resists the two types of adversaries in certificateless cryptography. In addition, the comparison with other existing certificateless SDVS schemes demonstrates the proposed scheme is provided with a good level of security and performance.
Security Analysis of Needham-Schroeder Symmetric Key Authentication Protocol

DU Jin-hui,HU Ming-zeng,ZHANG Zhao-xin

2008-01-01

Abstract:Verification and analyzing the authentication protocol with formal method has become international researcher’s new focus. This paper researches on Needham-Schroeder authentication protocol based on BAN logic. It points out the flaw of the protocol that can be used by replay attack and improves the protocol by adding nonce in the transferred message. Finally,this paper proves the correctness of the improved protocol with BAN logic.
On the Design of Blockchain-Based ECDSA with Fault-Tolerant Batch Verification Protocol for Blockchain-Enabled IoMT.

Hu Xiong,Chuanjie Jin,Mamoun Alazab,Kuo-Hui Yeh,Hanxiao Wang,Thippa Reddy Gadekallu,Weizheng Wang,Chunhua Su

DOI: https://doi.org/10.1109/jbhi.2021.3112693

IF: 7.7

2022-01-01

IEEE Journal of Biomedical and Health Informatics

Abstract:The blockchain-enabled internet of medical things (IoMT) is an emerging paradigm that could provide strong trust establishment and ensure the traceability of data sharing in the IoMT networks. One of the fundamental building blocks for Blockchain is Elliptic Curve Digital Signature Algorithm (ECDSA). Nevertheless, when processing a large number of transactions, the verification of multiple signatures will incur cumbersome overhead to the nodes in Blockchain. Although batch verification is able to provide a promising approach that verifies multiple signatures simultaneously and efficiently, the upper bound of batch size is limited to small-scale and the efficiency will drop rapidly as the batch size grows in the state-of-the-art ECDSA batch schemes. Meanwhile, most of the existing researches only focus on improving the efficiency of batch verification algorithms in various cryptosystem while ignoring the identification of invalid signatures, which could cause severe performance degradation when the batch verification fails. Motivated by these observations, this paper proposes an efficient and large-scale batch verification scheme with group testing technology based on ECDSA. The application of the presented protocols in Bitcoin and Hyperledger Fabric has been analyzed as supportive and effective. When the batch verification returns a false result, we utilize group testing technology to improve the efficiency of identifying invalid signatures. Comprehensive simulation results demonstrate that our protocol outperforms the related ECDSA batch verification schemes.
Cloud Data Auditing with Designated Verifier

Solomon Guadie Worku,Chunxiang Xu,Jining Zhao

DOI: https://doi.org/10.1007/s11704-013-3138-7

IF: 2.6688

2014-01-01

Frontiers of Computer Science

Abstract:An auditing scheme is a good way to prove owner’s data outsourced to the cloud are kept intact, and a scheme capable of giving public verifiability service is a good option that some researchers have managed to build for the last few years. However, in a public auditing scheme everybody does verification of data and a possibility of leaking some secrete information to the public verifiers is an issue that data owners are unhappywith this scenario. For example, the data owner does not want anybody else to know he has the data stored in the cloud server. Motivated by the issue of privacy associated with public auditing system, we proposed a designated verifier auditing (DVA) scheme based on Steinfeld et al.’s universal designated verifier (DV) signature scheme. Our DVA scheme authorizes a third party auditor with private verification capability. It provides private verification because the scheme involves private key of the verifier. Moreover, we present the batch auditing scheme to improve auditing efficiency. Through rigorous security analysis we showed that our scheme is provably secure in the random oraclemodel assuming that the computational Diffie-Hellman (CDH) problem is hard over the group of bilinear maps.
Designated confirmer signatures with unified verification

Guilin Wang,Fubiao Xia,Yunlei Zhao

DOI: https://doi.org/10.1007/978-3-642-25516-8_28

2011-01-01

Abstract:After the introduction of designated confirmer signatures (DCS) by Chaum in 1994, considerable researches have been done to build generic schemes from standard digital signatures and construct efficient concrete solutions. In DCS schemes, a signature cannot be verified without the help of either the signer or a semi-trusted third party, called the designated confirmer . If necessary, the confirmer can further convert a DCS into an ordinary signature that is publicly verifiable. However, there is one limit in most existing schemes: the signer is not given the ability to disavow invalid DCS signatures. Motivated by this observation, in this paper we first propose a new variant of DCS model, called designated confirmer signatures with unified verification , in which both the signer and the designated confirmer can run the same protocols to confirm a valid DCS or disavow an invalid signature. Then, we present the first DCS scheme with unified verification and prove its security in the random oracle (RO) model and under a new computational assumption, called Decisional Co-efficient Linear (D-co-L) assumption, whose intractability in pairing settings is analyzed in generic group model. The proposed scheme is constructed by encrypting Boneh, Lynn and Shacham's pairing based short signatures with signed ElGamal encryption. The resulting solution is efficient in both aspects of computation and communication. In addition, we point out that the proposed concept can be generalized by allowing the signer to run different protocols for confirming and disavowing signatures.
Verifying Security Protocols Using Dynamic Strategies

Yan Xiong,Cheng Su,Wenchao Huang,Fuyou Miao,Wansen Wang,Hengyi Ouyang

DOI: https://doi.org/10.48550/arxiv.1807.00669

2018-01-01

Abstract:Current formal approaches have been successfully used to find design flaws in many security protocols. However, it is still challenging to automatically analyze protocols due to their large or infinite state spaces. In this paper, we propose a novel framework that can automatically verifying security protocols without any human intervention. Experimental results show that SmartVerif automatically verifies security protocols that cannot be automatically verified by existing approaches. The case study also validates the effectiveness of our dynamic strategy.
Security Analysis of an Identity-Based Signature from Factorization Problem

Ganglin Zhang,Yongjian Liao,Yu Fan,Yikuan Liang

DOI: https://doi.org/10.1109/access.2020.2964040

IF: 3.9

2020-01-01

IEEE Access

Abstract:Many sensitive data are generated by resource-limitation devices in the Vehicular ad hoc network (VANET). When these data are divulged, people 's life and property will be threatened. To solve these problems, Wei et al. proposed a lightweight privacy-preserving protocol based on RSA assumption for VANET and they claimed that their protocol was secure and low overhead. In this paper, first of all, we show that the basic signature scheme to be used in Wei et al.'s protocol is not secure, i.e., the user's private key will be revealed from the pairs of message-signatures, which causes the protocol to be insecure. We also show that our security analysis is feasible and effective in practice from the theory and experiments. Then we construct a new identity-based signature scheme based RSA assumption and prove it is existentially unforgeable under the chosen message attack without random oracle. Finally, we update the Wei et al.'s protocol and do some experiments to evaluate the efficiency of our scheme in the updated protocol.
Efficient Non-interactive Deniable Authentication Protocols

Haifeng Qian,Zhenfu Cao,Lichen Wang,Qingshui Xue

DOI: https://doi.org/10.1109/CIT.2005.109

2005-01-01

Abstract:Deniable authentication protocol is an authentication protocol that allows a sender to authenticate a message for a receiver, in a way that the receiver cannot convince a third party that such authentication ever took place. In recent years, due to the popularity of Internet and its special property, many deniable authentication protocols have been proposed. However, most of these proposed schemes are interactive and less efficient. To our knowledge, Shao has proposed an efficient non-interactive deniable authentication protocol based on generalized ElGamal signature scheme without security proof. Lu et al have proposed a deniable authentication also, however, the protocol suffers from the receiver's attack who once interacts with the sender. For the reason above, we would like to propose a generic method to construct efficient non-interactive deniable authentication protocols from any trapdoor permutations. Using RSA trapdoor permutations we introduce a new digital signature with tight security and use it to construct a concrete deniable authentication protocol. Concentrated on security problem we prove the protocol secure in random oracle. We also believe that the protocol is much efficient and practical in application with non-interactive property.

Security of DSA type batch verification protocols

Security Analysis of Some Batch Verifying Signatures from Pairings.

Notes Onsecurity Proof of Digital Signature Scheme

Optimized MHealth Batch Verification for a Variant of DSA

Cryptanalysis of Strong Designated Verifier Signature Scheme with Non-delegatability and Non-transferability

An Efficient Batch Verifying Scheme for Detecting Illegal Signatures.

Security analysis of verifiably encrypted signature scheme

A Reduction of Security Notions in Designated Confirmer Signatures

Secure Order-Specified Multisignature Scheme Based on DSA

Delegatability of Designated Verifier Signature

An Effective Verifiable Database Protocol in Severe Untrusted Environment

Cryptanalysis of a Certificateless Aggregate Signature Scheme with Efficient Verification

On the security of two server-aided verification signature schemes

A Certificateless Strong Designated Verifier Signature Scheme with Non-delegatability.

Security Analysis of Needham-Schroeder Symmetric Key Authentication Protocol

On the Design of Blockchain-Based ECDSA with Fault-Tolerant Batch Verification Protocol for Blockchain-Enabled IoMT.

Cloud Data Auditing with Designated Verifier

Designated confirmer signatures with unified verification

Verifying Security Protocols Using Dynamic Strategies

Security Analysis of an Identity-Based Signature from Factorization Problem

Efficient Non-interactive Deniable Authentication Protocols