Abstract:We consider the problem of outsourcing computation on data authenticated by different users. Our aim is to describe and implement the simplest possible solution to provide data integrity in cloud-based scenarios. Concretely, our multi-key linearly homomorphic signature scheme (mklhsdocumentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$${mathsf {mklhs}}$$end{document}) allows users to upload signed data on a server, and at any later point in time any third party can query the server to compute a linear combination of data authenticated by different users and check the correctness of the returned result. Our construction generalizes Boneh et al.’s linearly homomorphic signature scheme (PKC’09 [7]) to the multi-key setting and relies on basic tools of pairing-based cryptography. Compared to existing multi-key homomorphic signature schemes, our mklhsdocumentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$${mathsf {mklhs}}$$end{document} is a conceptually simple and elegant direct construction, which trades-off privacy for efficiency. The simplicity of our approach leads us to a very efficient construction that enjoys significantly shorter signatures and higher performance than previous proposals. Finally, we implement mklhsdocumentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$${mathsf {mklhs}}$$end{document} using two different pairing-friendly curves at the 128-bit security level, a Barreto-Lynn-Scott curve and a Barreto-Naehrig curve. Our benchmarks illustrate interesting performance trade-offs between these parameters, involving the cost of exponentiation and hashing in pairing groups. We provide a discussion on such trade-offs that can be useful to other implementers of pairing-based protocols.

HMFEv - An Efficient Multivariate Signature Scheme.

Design Principles for HFEv- Based Multivariate Signature Schemes

Applying Two Channels to Vector Space Secret Sharing Based Multi-Signature Scheme

Identity-Based Signature Schemes for Multivariate Public Key Cryptosystems.

Efficient Key Recovery for All HFE Signature Variants

VDOO: A Short, Fast, Post-Quantum Multivariate Digital Signature Scheme

A Complete Cryptanalysis of the Post-Quantum Multivariate Signature Scheme Himq-3

ZHFE, a New Multivariate Public Key Encryption Scheme.

Fast Multivariate Signature Generation in Hardware: the Case of Rainbow

Improved Cryptanalysis of HFEv- Via Projection.

A variant of rainbow with shorter secret key and faster signature generation.

The Simplest Multi-key Linearly Homomorphic Signature Scheme

Rainbow, a new multivariable polynomial signature scheme

A New Efficient ID-Based Verifiably Encrypted Signature Scheme

Multivariate Public Key Cryptography-Based Proxy Ring Signature Scheme

Square-Vinegar Signature Scheme

Attack on Digital Multi-Signature Scheme Based on Elliptic Curve Cryptosystem.

Multivariable Public Key Cryptosystems

An Efficient Verifiably Encrypted Signature Scheme Based on Half-Trust Private Key Generator

Proxy Re-signature Scheme Based on Multivariate Public Key Cryptography

A new multivariate primitive from CCZ equivalence