Abstract:Threshold cryptography aims at enhancing the availability and security of decryption and signature schemes by splitting private keys into several (say n) shares (typically, each of size comparable to the original secret key). In these schemes, a quorum of at least (d ≤ n) servers needs to act upon a message to produce the result (decrypted value or signature), while corrupting less than d servers maintains the scheme’s security. For about two decades, extensive study was dedicated to this subject, which created a number of notable results. So far, most practical threshold signatures, where servers act non-interactively, were analyzed in the limited static corruption model (where the adversary chooses which servers will be corrupted at the system’s initialization stage). Existing threshold encryption schemes that withstand the strongest combination of adaptive malicious corruptions (allowing the adversary to corrupt servers at any time based on its complete view), and chosenciphertext attacks (CCA) all require interaction (in the non-idealized model) and attempts to remedy this problem resulted only in relaxed schemes. The same is true for threshold signatures secure under chosenmessage attacks (CMA). It was open (for about 10 years) whether there are non-interactive threshold schemes providing the highest security (namely, CCA-secure encryption and CMA-secure signature) with scalable shares (i.e., as short as the original key) and adaptive security. This paper first surveys our ICALP 2011 work which answers this question affirmatively by presenting such efficient decryption and signature schemes within a unified algebraic framework. The paper then describes how to design on top of the surveyed system the first “forward-secure non-interactive threshold cryptosystem with adaptive security.”

Secure Anonymous Threshold Subliminal Channel for Ad Hoc Environments

A Threshold Subliminal Channel For Manet Using Publicly Verifiable Hybrid Signcryption

Efficient and Proactive Threshold Signcryption

Threshold Quantum Secure Direct Communication Without Entanglement

A New Threshold Ring Signature for Ad-hoc Group

Threshold signature scheme for group communications without shared distribution center

Scalable Threshold Scheme Without A Trusted Third Party

A Novel Threshold Changeable Secret Image Sharing Scheme

Improved Threshold Ring Signature For Ad-Hoc Group

Cryptanalysis of Threshold Signature Scheme for Group Communication

Cryptanalysis of a Data Security Protection Scheme for VoIP

A New Threshold Signature Scheme to Withstand the Conspiracy Attack.

Multiple Threshold Schemes Under The Weak Secure Condition

Threshold public key encryption scheme resilient against continual leakage without random oracles

Quantum Advantage of Threshold Changeable Secret Sharing Scheme

Bilinear Pairings-Based Threshold Identity Authentication Scheme for Ad Hoc Network.

A Secure Threshold Multi-Secret Sharing Scheme

Complex Threshold Key Management for Ad Hoc Network

A Threshold Multi-secret Sharing Scheme.

Information Security and Cryptology: Third SKLOIS Conference, Inscrypt 2007, Xining, China, August 31 - September 5, 2007, Revised Selected Papers

Dynamic(t,n) Threshold Secret Sharing Scheme Based on Circle Properties