Abstract:We analyze the security of the first definitional framework of Updatable signature, which was proposed in PKC 2021 by Cini et al. (as the above image). We propose an improved updatable signature scheme that changes the generation mode of the update token (the details is shown below) to weaken it's power, and use the technique of indistinguishability obfuscation to make the token no‐directional key update and unidirectional signature update. Updatable signature (US) resists key compromise attacks and is integral in numerous fields that require authentication. However, previous US schemes granted excessive power to update token, which cannot achieve no‐directional key update. In this paper, we improve Cini et al.'s US scheme by weakening update token. The improvement lies in changing the mode of generating an update token, from the signer alone to the signer and the server cooperatively. Specifically, they first negotiate a secret value, which is then used by the signer to generate an update token. This mode ensures that only the entity who owns the secret value can use the update token to update a signature. Furthermore, we employ indistinguishability obfuscation to minimize information leakage through update token. These advancements make the improved updatable signature scheme achieve no‐directional key update and unidirectional signature update. Finally, we present an enhanced security model, where an adversary is permitted to freely corrupt update tokens and signing keys, except the signing key at challenge epoch, and then prove the improved scheme to be unforgeable based on CDH hardness.

Forward-secure public-key encryption scheme with untrusted update:security model and constructions

Improvement of Provably Secure Self-Certified Proxy Convertible Authenticated Encryption Scheme

Token open secure and practical NTRU-based updatable encryption

Towards Efficient Verifiable Forward Secure Searchable Symmetric Encryption

Unidirectional Key Update in Updatable Encryption, Revisited

Achieving forward unforgeability in keyword-field-free conjunctive search

Practical OpenPGP Extension with Forward Security

Public key encryption for the forgetful

Public Key Encryption Without Random Oracle Made Truly Practical

ROSE: Robust Searchable Encryption With Forward and Backward Security

New forward-secure certificateless proxy blind signature scheme

Forward Private Searchable Symmetric Encryption with Optimized I/O Efficiency

Updatable Signature Scheme With Weakened Token and No‐Directional Key Update

Construction and security analysis of hash algorithm based on stream cipher

Communication-Efficient and Fine-Grained Forward-Secure Asynchronous Messaging

Forward and Backward-Secure Range-Searchable Symmetric Encryption

A generalized signcryption scheme with forward security of multiple private key generators

An ECC-Based Digital Signature Scheme for Privacy Protection in Wireless Communication Network

Secure key generation encryption scheme based on index parameter updates

On Security Analysis of an After-the-fact Leakage Resilient Key Exchange Protocol

On the Security of Public Key Protocols