Abstract:Multi-signature is an important technology to compress multiple signatures on the common message into a compact one, thereby reducing the consumption of storage space and transmission bandwidth. Such a cryptographic primitive is widely used in financial applications such as blockchain which requires multiple keys to authorize a transaction. With the advent of quantum computers, traditional multi-signature schemes may no longer be secure as their underlying security assumptions (e.g. RSA or discrete logarithm problems) may not hold anymore. In this paper, we propose a novel identity-based multi-signature (IBMS) scheme over NTRU lattices, which is secure against the attacks of quantum computers. To the best of our knowledge, it is the first lattice-based IBMS scheme. We show that our scheme is provably secure in the random oracle model based on the ring version of the short integer solution assumption (Ring-SIS). Compared with the closely related works in the literature, our scheme enables the signer to select its system identity (such as email address, physical IP address, and etc.) as the public key, which effectively alleviates the certificate management problem in the PKI setting, and takes the advantage of discrete Gaussian distribution instead of uniform distribution to generate secret signing keys and multi-signatures. Besides, our scheme does not require all the system users to setup a trusted common string, which further simplifies the deployment of our scheme in practice.

A Generic Construction of Tightly Secure Signatures in the Multi-User Setting

Tightly-Secure Signatures From The Decisional Composite Residuosity Assumption

Tightly Secure Signature Schemes from the LWE and Subset Sum Assumptions

Short Identity-Based Signatures with Tight Security from Lattices

Provably secure multi-signature scheme based on the standard SM2 signature scheme

A Novel Identity-Based Multi-Signature Scheme over NTRU Lattices

Tightly Secure Chameleon Hash Functions in the Multi-User Setting and Their Applications.

Secure Order-Specified Multisignature Scheme Based on DSA

Almost Tight Multi-user Security under Adaptive Corruptions from LWE in the Standard Model.

Efficient and Strongly Unforgeable Identity-Based Signature Scheme from Lattices in the Standard Model.

Authenticated Key Exchange and Signatures with Tight Security in the Standard Model.

A Multi-Group Signature Scheme From Lattices

Linearly Homomorphic Signature with Tight Security on Lattice

On the Security of a Lattice-Based Multi-party Concurrent Signature Scheme

A multisignature scheme for the general access structure

Identity-Based Signature Schemes for Multivariate Public Key Cryptosystems.

On the Security of an Enhanced Signature Scheme

Cryptanalysis of an Identity Based Proxy Multi-Signature Scheme.

Efficient Identity Based Signature/Signcryption Scheme in the Standard Model

NEW EXTENSIONS OF PAIRING-BASED SIGNATURES INTO UNIVERSAL (MULTI) DESIGNATED VERIFIER SIGNATURES

On the Security of Two Identity-Based Signature Schemes Based on Pairings