Abstract:This work aims to improve the practicality of gadget-based cryptosystems, with a focus on hash-and-sign signatures. To this end, we develop a compact gadget framework in which the used gadget is a square matrix instead of the short and fat one used in previous constructions. To work with this compact gadget, we devise a specialized gadget sampler, called semi-random sampler, to compute the approximate preimage. It first deterministically computes the error and then randomly samples the preimage. We show that for uniformly random targets, the preimage and error distributions are simulatable without knowing the trapdoor. This ensures the security of the signature applications. Compared to the Gaussian-distributed errors in previous algorithms, the deterministic errors have a smaller size, which lead to a substantial gain in security and enables a practically working instantiation. As the applications, we present two practically efficient gadget-based signature schemes based on NTRU and Ring-LWE respectively. The NTRU-based scheme offers comparable efficiency to Falcon and Mitaka and a simple implementation without the need of generating the NTRU trapdoor. The LWE-based scheme also achieves a desirable overall performance. It not only greatly outperforms the state-of-the-art LWE-based hash-and-sign signatures, but also has an even smaller size than the LWE-based Fiat-Shamir signature scheme Dilithium. These results fill the long-term gap in practical gadget-based signatures.

Compact Leakage-Free ID-Based Signature Scheme with Applications to Secret Handshakes.

A New Efficient ID-Based Verifiably Encrypted Signature Scheme

A secure and efficient identity-based quantum signature scheme

On the Security of Two Identity-Based Signature Schemes Based on Pairings

An Efficient Certificateless Signature Scheme With Provably Security and Its Applications

Quantum Signature Scheme Based on Secret Sharing

Short Identity-Based Signatures with Tight Security from Lattices

CSH: A Post-quantum Secret Handshake Scheme from Coding Theory

Anonymous Signature Schemes

An Efficient Certificateless Aggregate Signature with Constant Pairing Computations

Cryptanalysis and Improvement of an Efficient ID-based Certificateless Signature Scheme

An Efficient and Provably Secure SM2 Key-Insulated Signature Scheme for Industrial Internet of Things

GCKSign: Simple and efficient signatures from generalized compact knapsack problems

Experimental quantum secure network with digital signatures and encryption

New Efficient Certificateless Blind Signature Scheme

Key-and-Signature Compact Multi-Signatures for Blockchain: A Compiler with Realizations

Identity-Based Signature Schemes for Multivariate Public Key Cryptosystems.

A novel quantum ring signature based on secret sharing

Compact Lattice Gadget and Its Applications to Hash-and-Sign Signatures

Cryptographic primitives based on compact knapsack problem

An ID-Based Linearly Homomorphic Signature Scheme and Its Application in Blockchain