ElGamal's multisignature digital signature scheme

Zichen Li,Yixian Yang

1999-01-01

Abstract:Based on ElGamal's digital signature scheme, a new sequential digital multisignature and a new broadcasting digital multisignature which are based on DLP are proposed. The initial stage of the schemes is simple and the signatures of the schemes are random, so the schemes has high security.

What problem does this paper attempt to address?

Two Efficient Digital Multisignature Schemes

Hongwei Chu,Yinliang Zhao

DOI: https://doi.org/10.1109/iscid.2008.204

2008-01-01

Abstract:Based on Schnorr algorithm, by adopting ID code and time-limit approaches, propose two multisignature schemes which can prevent repeated broadcast attack and malicious delay in the process. For most of the computational effort for signature generation can be done in preprocessing stage, both identification and signature with high efficiency, and it's security is based on the difficulty of discrete logarithms problem. In the end, analyze the two schemes' security and efficiency in detail.
Applying Two Channels to Vector Space Secret Sharing Based Multi-Signature Scheme

Xiao Qing-hua,Ping Ling-di,Chen Xiao-ping,Pan Xue-zeng

DOI: https://doi.org/10.1631/bf02842478

2004-01-01

Journal of Zhejiang University SCIENCE A

Abstract:Secret sharing and digital signature is an important research area in information security and has wide applications in such fields as safeguarding and legal use of confidential information, secure, multiparty computation and electronic commerce. But up to now, study of signature based on general vector space secret sharing is very weak. Aiming at this drawback, the authors did some research on vector space secret sharing against cheaters, and proposed an efficient but secure vector space secret sharing based multi-signature scheme, which is implemented in two channels. In this scheme, the group signature can be easily produced if an authorized subset of participants pool their secret shadows and it is impossible for them to generate a group signature if an unauthorized subset of participants pool their secret shadows. The validity of the group signature can be verified by means of verification equations. A group signature of authorized subset of participants cannot be impersonated by any other set of participants. Moreover, the suspected forgery can be traced, and the malicious participants can be detected in the scheme. None of several possible attacks can successfully break this scheme.
Attack on Digital Multi-Signature Scheme Based on Elliptic Curve Cryptosystem.

Duo Liu,Ping Luo,Yi-Qi Dai

DOI: https://doi.org/10.1007/s11390-007-9005-y

2007-01-01

Abstract:The concept of multisignature, in which multiple signers can cooperate to sign the same message and any verifier can verify the validity of the multi-signature, was first introduced by Itakura and Nakamura. Several multisignature schemes have been proposed since. Chen et al. proposed a new digital multi-signature scheme based on the elliptic curve cryptosystem recently. In this paper, we show that their scheme is insecure, for it is vulnerable to the so-called active attacks, such as the substitution of a “false” public key to a “true” one in a key directory or during transmission. And then the attacker can sign a legal signature which other users have signed and forge a signature himself which can be accepted by the verifier.
A Robust Elliptic Curve Digital Multisignature Scheme

吕皖丽,钟诚

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.05.046

2004-01-01

Abstract:The existed ECDSA scheme does not fit for multisignature. This paper first improves the ECDSA scheme, and presents a digital signature approach based on the difficulty of solving the elliptic curve discrete logarithm problem (ECDLP). Moreover, the paper presents a multisignature scheme also based on the difficulty of solving the ECDLP. The analysis shows that the two schemes are correctness and robust.
Several New ElGamal Type Digital Signature Schemes and Their Enhanced Schemes

Qing-ju WANG,Bao-yuan KANG,Jin-guang HAN

DOI: https://doi.org/10.3969/j.issn.1005-0523.2005.01.033

2005-01-01

Abstract:In this paper ,we modify the design criteria of ElGamal type digital signature schemes ,and several new schemes are put on the list .Moreover ,an enhanced scheme is provided ,whose security property is based on the factorizing and discrete logarithm problems simultaneously , so it is much safer.
A STRUCTURED MULTI-SIGNATURE SCHEME BASED ON ELLIPTIC CURVE CRYPTOSYSTEM

Liu Xiaochuan,Chen Enhong

DOI: https://doi.org/10.3969/j.issn.1000-386X.2010.08.092

2010-01-01

Abstract:Based on elliptic curve digital signature function,a structured multi-signature scheme with the combination of sequential and broadcasting algorithms is proposed in this paper.At the same time,we also analyze the security of the scheme.The scheme is more flexible than others and can be adapted to various complex multi-signature structures.It can also satisfy with the safety properties required by the digital signature including non-forgeability,non-repudiation,forward-secure,anti-collusion attacks,replay attack prevention and forward security,etc.
Two Blind Signature Schemes Based on Discrete Logarithm

Yifeng Yao,Xinghao Jiang,Xiaohong Liu,Kangsheng Chen

DOI: https://doi.org/10.3321/j.issn:1002-8331.2001.09.034

2001-01-01

Abstract:Blind digital signature scheme plays an important role in cryptosystem such as e-cash system. In this paper two blind signature schemes are obtained from two modified generalized ELGamal type digital signature schemes. And we show the two schemes which are strong.
Secure Order-Specified Multisignature Scheme Based on DSA

Yang Muxiang,Su Li,Li Jun,Hong Fan

DOI: https://doi.org/10.1007/bf02831833

2006-01-01

Wuhan University Journal of Natural Sciences

Abstract:In multisignature schemes signers can sign either in a linear order or not in any specified order, but neither of them is adequate in some scenarios where require mixture using of orderless and ordered multisignature. Most order-specified multisignatures specified the orders as linear ones. In this paper, we proposed an order-specified multisignature scheme based on DSA secure against active insider attack. To our knowledge, it is the first order-specified multisignature shceme based on DSA signature scheme, in which signers can sign in flexible order represented by series-parallel graphs. In the multisignature scheme verification to both signers and signing order are available. The security of the scheme is proved by reduce to an identification scheme that is proved have some concrete security. The running time of verifying a signature is comparable to previous schemes while the running time of multisignature generation and the space needed is less than those schemes.
An Efficient Probabilistic Public-Key Block Encryption and Signature Scheme Based on El-Gamal's Scheme

Hung-Min Sun,Tzonelih Hwang

DOI: https://doi.org/10.1109/ccst.1991.202207

1991-01-01

Abstract:A modified El Gamal scheme is presented which provides both secrecy and signature simultaneously with a high information rate of w/w+2, where w is a predetermined number of plaintext blocks to be sent. The scheme provides a better information rate than the original El Gamal scheme does, and thus is very efficient to use in secure data communications. The security of the scheme depends on the difficulty of solving the discrete logarithms
Practical Signature Scheme From Gamma-Protocol

Zhoujun Ma,Li Yang,Yunlei Zhao

DOI: https://doi.org/10.1007/978-3-319-49151-6_7

2016-01-01

Abstract:Digital signature is fundamental to information security. Today many signature schemes based on discrete logarithm problem (DLP), including Schnorr, DSA and their variants, have been standardized and widely used. In this work, we review and make a comparative study on the DLP-based schemes included in some standard documents such as ISO/IEC 14888-3 and ISO-11889. We find some disadvantages of these standardized schemes in efficiency, security and usage, which shows that further improvement on digital signatures is still possible.In this work, we present a new G-protocol (an extension of Sigma-protocol), and transform this protocol into a concrete signature scheme (referred to as EC-CDSA) based on elliptic curve groups. We show that our EC-CDSA scheme combines, in essence, the advantages of the current standardized signature schemes based on DLP, while saving from or alleviating the disadvantages of them all.
ID-Based Digital Multisignature Scheme

Shaohua Tang,Gang Wei

DOI: https://doi.org/10.1142/S0218126699000189

2011-01-01

Journal of Circuits Systems and Computers

Abstract:By introducing identity-based cryptosystem into the digital multisignature, we propose a new ID-based digital multisignature scheme in this paper, which allows a user to communicate with others by knowing only the identity of his communication partner and the public key of the KAC, and provides an efficient multisignature without any data expansion. Its security is also analyzed.
Provably secure multi-signature scheme based on the standard SM2 signature scheme

Yuchen Xiao,Lei Zhang,Yafang Yang,Wei Wu,Jianting Ning,Xinyi Huang

DOI: https://doi.org/10.1016/j.csi.2023.103819

IF: 3.721

2023-12-07

Computer Standards & Interfaces

Abstract:The multi-signature scheme plays a crucial role in addressing trust and authentication challenges in digital transactions and other scenarios by allowing multiple users to sign the same message. Among various signature schemes, the SM2 signature scheme stands out for its exceptional security and efficiency, making it widely adopted in numerous fields. In this paper, we propose the first provably secure multi-signature scheme based on the standard SM2 signature scheme, i.e., the scheme can be reduced to the standard SM2 signature scheme when there is only one signer. We prove that our scheme is existential unforgeability under chosen message attacks in the bijective random oracle model, based on the assumption that the elliptic curve discrete logarithm problem is hard. Compared with the existing multi-signature schemes based on the SM2 signature scheme in the same category, our scheme exhibits improved efficiency in terms of communication delay and computational cost.

computer science, software engineering, hardware & architecture
THE PROXY SIGNATURE SCHEME BASED ON ELLIPTIC CURVE DIGITAL SIGNATURE ALGORITHM

Li Hang,Yue Lihua,Shan Laixiang

DOI: https://doi.org/10.3969/j.issn.1000-386X.2007.03.002

2007-01-01

Abstract:Proxy signature schemes allow a proxy signer to generate a proxy signature on behalf of an original signer.There are many application of proxy signature in electronic commerce.This paper presents the proxy signature scheme based on Elliptic Curve Digital Signature Algorithm.This scheme possesses the following characters:high security class,less length of key,the less requirement of storage space,less bandwith requirement.So the scheme leads to a wide application perspective in secure communication in network especially in limit environments like wireless network and mobile device.
PASSWORD AUTHENTICATION SCHEMES BASED UPON DIGITAL SIGNATURE SCHEMES

qi ming,zhang ling,tang shaohua,xiao guozhen

1997-01-01

Abstract:In this paper,many new remote password authentication schemes are proposed based on generalized ElGamal type digital signature schemes.In addition,three improved schemes of paper are presented.By using these schemes,computer system can not only supervises and controls all passwords,but also withstand all attack of forging password.
Sequential Aggregate Signatures and Multisignatures in the Plain Public Key Model

Zhou Xuhua,Lai Junzuo,Liu Shengli,Chen Kefei

DOI: https://doi.org/10.1049/cje.2015.04.019

IF: 1.019

2015-01-01

Chinese Journal of Electronics

Abstract:At Eurocrypt'06, Lu et al. presented the first Sequential aggregate signature (SAS) provably secure without random oracles. The drawback of their scheme is that users need long public keys and the security model makes the Knowledge of secure key (KOSK) assumption. We present the first SAS scheme, which the user needs short public keys and the security is proven without random oracles, in the plain public key model. We also present the first Multisignature (MS) scheme in the plain public key model, which the security is proven without random oracles.
Sequential Aggregate Signatures with Short Public Keys without Random Oracles

Kwangsu Lee,Dong Hoon Lee,Moti Yung

DOI: https://doi.org/10.1016/j.tcs.2015.02.019

2015-02-24

Abstract:The notion of aggregate signature has been motivated by applications and it enables any user to compress different signatures signed by different signers on different messages into a short signature. Sequential aggregate signature, in turn, is a special kind of aggregate signature that only allows a signer to add his signature into an aggregate signature in sequential order. This latter scheme has applications in diversified settings such as in reducing bandwidth of certificate chains and in secure routing protocols. Lu, Ostrovsky, Sahai, Shacham, and Waters (EUROCRYPT 2006) presented the first sequential aggregate signature scheme in the standard model. The size of their public key, however, is quite large (i.e., the number of group elements is proportional to the security parameter), and therefore, they suggested as an open problem the construction of such a scheme with short keys. In this paper, we propose the first sequential aggregate signature schemes with short public keys (i.e., a constant number of group elements) in prime order (asymmetric) bilinear groups that are secure under static assumptions in the standard model. Furthermore, our schemes employ a constant number of pairing operations per message signing and message verification operation. Technically, we start with a public-key signature scheme based on the recent dual system encryption technique of Lewko and Waters (TCC 2010). This technique cannot directly provide an aggregate signature scheme since, as we observed, additional elements should be published in a public key to support aggregation. Thus, our constructions are careful augmentation techniques for the dual system technique to allow it to support sequential aggregate signature schemes. We also propose a multi-signature scheme with short public parameters in the standard model.

Cryptography and Security
Security Analysis and Improvement of Several Partial Blind Signature Schemes

Xiangjun Xin,Fagen Li

2006-01-01

Journal of Xidian University

Abstract:The security of several partial blind signature schemes based on the discrete logarithm proposed recently by Zhang et al.is analyzed,and it is found that the adversary can get rid of the partial blind property of the signature without being detected by multiplying the reverse of the partial blind factor to the blind message,and the adversary can forge the embedding parameter in the signature.Then,by using the factoring difficulty and covering the order of the generator of the finite field,the improved partial blind signature schemes not only have the partial blind property but also can withstand the forgery of the embedding parameter,and at the same time they have the same other security requirements as those of the schemes by Zhang et al.
A Broadband Subliminal Channel in Signatures Without Sharing the Signing Key

Qinghua Hu,Chunxiang Xu,Wanpeng Li

DOI: https://doi.org/10.1109/trustcom60117.2023.00118

2024-01-01

Abstract:The utilization of the broadband subliminal channel allows a sender to covertly transmit a message to a receiver through digital signatures. This method requires the sender to relinquish the signing key to the receiver. As a result, the receiver has the ability to employ the signing key to sign any data on behalf of the sender without the sender’s knowledge or consent. Meanwhile, difficulties may arise if the sender is unwilling to disclose the signing key to the receiver. In this paper, we propose a broadband subliminal channel that can be used in digital signature schemes (e.g., DSA, ECDSA, ElGamal, and Schnorr) without disclosing the signing key to the receiver. As it writes the message on a digital signature, we call it WMoS. We first implement WMoS in the Elliptic Curve Digital Signature Algorithm (ECDSA). We then provide the security proof to show that signatures generated in WMoS have the same security level as standard ECDSA signatures. Moreover, we discuss the variants of WMoS in ECDSA and use them to construct applications. Furthermore, we use the implementation of WMoS to generate a signature for an Ethereum transaction to demonstrate its feasibility. We also evaluate the efficiency of WMoS in ECDSA, and the results show that WMoS in ECDSA can generate a signature as efficiently as the standard ECDSA.
Public-Key Cryptosystem Based on the Discrete Logarithm Problem.

Lein Harn,Shoubao Yang

DOI: https://doi.org/10.1007/3-540-57220-1_85

1992-01-01

Abstract:In 1985, T. ElGamal proposed a public-key cryptosystem and a signature scheme, in which the difficulty of breaking the system is based on the difficulty of computing a discrete logarithm in a finite group. For the same security level, the size of the ciphertext and the computational time of ElGamal's encryption are double those of the wellknown RSA scheme. In this paper, we propose a public-key cryptosystem based on the discrete logarithm, in which the size of the ciphertext and the computational time are the same as those of the RSA scheme, and the security level is the same as the ElGamal cryptosystem.
A multisignature scheme for the general access structure

Chunxiang Xu,Junhui Zhou,Guozhen Xiao

DOI: https://doi.org/10.1109/icccas.2005.1493368

2005-01-01

Abstract:A multisignature scheme for the general access structure is proposed. This scheme allows the signers of an authorized subset to cooperate to generate a valid group signature, and it is impossible for those of an unauthorized subset to generate a group signature. Its computation complexity is comparatively low. The security of the scheme is based on the intractability of the discrete log problem. Both the validity of the partial signature of a signer and that of the group signature of an authorized subset can be verified, and the suspected forgery and forgers can be detected. © 2005 IEEE.

ElGamal's multisignature digital signature scheme

Two Efficient Digital Multisignature Schemes

Applying Two Channels to Vector Space Secret Sharing Based Multi-Signature Scheme

Attack on Digital Multi-Signature Scheme Based on Elliptic Curve Cryptosystem.

A Robust Elliptic Curve Digital Multisignature Scheme

Several New ElGamal Type Digital Signature Schemes and Their Enhanced Schemes

A STRUCTURED MULTI-SIGNATURE SCHEME BASED ON ELLIPTIC CURVE CRYPTOSYSTEM

Two Blind Signature Schemes Based on Discrete Logarithm

Secure Order-Specified Multisignature Scheme Based on DSA

An Efficient Probabilistic Public-Key Block Encryption and Signature Scheme Based on El-Gamal's Scheme

Practical Signature Scheme From Gamma-Protocol

ID-Based Digital Multisignature Scheme

Provably secure multi-signature scheme based on the standard SM2 signature scheme

THE PROXY SIGNATURE SCHEME BASED ON ELLIPTIC CURVE DIGITAL SIGNATURE ALGORITHM

PASSWORD AUTHENTICATION SCHEMES BASED UPON DIGITAL SIGNATURE SCHEMES

Sequential Aggregate Signatures and Multisignatures in the Plain Public Key Model

Sequential Aggregate Signatures with Short Public Keys without Random Oracles

Security Analysis and Improvement of Several Partial Blind Signature Schemes

A Broadband Subliminal Channel in Signatures Without Sharing the Signing Key

Public-Key Cryptosystem Based on the Discrete Logarithm Problem.

A multisignature scheme for the general access structure