Abstract:Fair exchange protocols aim to allow two parties to exchange digital items in a fair manner. Optimistic fair exchange (OFE) is a kind of protocols that solves the fair exchange problem with the help of a trusted third party (TTP), usually referred to as an ‘arbitrator’. The participation of the arbitrator is only required when there is a dispute between the exchanging parties. In the literature, the highest level of security of optimistic fair exchange is the multi-user security in the chosen-key model, proposed by Huang, Yang, Wong and Susilo in CT-RSA 2008. They showed that an efficient optimistic fair exchange scheme, secure in this sense, can be constructed generically from a conventional signature and a ring signature. In particular, the underlying ring signature is required to be unforgeable under an adaptive attack, against a static adversary in the 2-user setting. Concurrent signatures, introduced by Chen, Kudla and Paterson in Eurocrypt 2004, allow two parties to produce two ambiguous signatures until an extra piece of information, the keystone, is released by one of the parties. Upon the release of the keystone, the ambiguity will be revoked and the signatures bind to their true signers concurrently. Concurrent signatures, however, are known to fall just short of fully solving the long standing fair exchange of signatures problem. The price for not requiring any TTP is that the party who holds the keystone always has an advantage over the other party in controlling when and whether the protocol completes or not. In this thesis, the fair exchange of digital signatures problem is studied. In the first part of this thesis, the OFE security is strengthened and a more practical model which is called enhanced chosen-key model is proposed. Unlike the existing multiuser setting and chosen-key model, an adversary in the enhanced chosen-key model is further provided with the signing oracle that outputs full signatures generated by the signer, and may even be allowed to have access to the arbitrator’s secret key. The necessity for the new model is demonstrated. It is shown that two existing

Optimistic Gradual Fair Exchange by Using Threshold Cryptography

A Gradual and Optimistic Fair Exchange Protocol

FAIR EXCHANGE PROTOCOLS WITH OFF-LINE SEMI-TRUSTED THIRD PARTY

Distributed Certification Application Via a Trusted Dealer

Toward Fairness of Cryptocurrency Payments.

A Publicly Verifiable Optimistic Fair Exchange Protocol Using Decentralized CP-ABE

An optimistic fair exchange protocol for P2P e-procurement

Asynchronous Threshold ECDSA with Batch Processing

Scalable Threshold Scheme Without A Trusted Third Party

Optimistic Fair Exchange Protocol Suitable for P2P Network

A Fair Exchange Protocol Based on Short Signature with the Off-Line Semi-Trusted Third Party

An Improved Protocol for Optimistic Multi-Party Fair Exchange

Multi-Party Fair Exchange Protocol with an Off-Line Semi-Trust Third Party

Contributions on Fair Exchange of Digital Signatures

A Secure Threshold Multi-Secret Sharing Scheme

P2PFAIR: Fair exchange in P2P sharing system without dedicated TTP

Optimizing One Fair Document Exchange Protocol

Proxy Re-encryption based Fair Trade Protocol for Digital Goods Transactions via Smart Contracts

A Dynamic(k,n) Threshold Key Escrow Scheme

A Secret Sharing Scheme of Dynamic Threshold with Cheaters Detection and Identification

Trustless Distributed Symmetric-key Encryption