Abstract:Driven by the open problem raised by Hofheinz and Kiltz (J Cryptol 25(3):484–527, 2012), we study the formalization of lattice-based programmable hash function (PHF) and give three types of concrete constructions by using several techniques such as a novel combination of cover-free sets and lattice trapdoors. Under the inhomogeneous small integer solution (ISIS) assumption, we show that any (non-trivial) lattice-based PHF is a collision-resistant hash function, which gives a direct application of this new primitive. We further demonstrate the power of lattice-based PHF by giving generic constructions of signature and identity-based encryption (IBE) in the standard model, which not only provide a way to unify several previous lattice-based schemes using the partitioning proof techniques, but also allow us to obtain new short signature schemes and IBE schemes from (ideal) lattices. Specifically, by instantiating the generic constructions with our Type-II and Type-III PHF constructions, we immediately obtain two short signatures and two IBE schemes with asymptotically much shorter keys. A major downside which inherits from our Type-II and Type-III PHF constructions is that we can only prove the security of the new signatures and IBEs in the bounded security model that the number Q of the adversary's queries is required to be known in advance. Another downside is that the computational time of our new signatures and IBEs is a linear function of Q , which is large for typical parameters. To overcome the above limitations, we also give a refined way of using Type-II and Type-III PHFs to construct lattice-based short signatures with short verification keys in the full security model. In particular, our methods depart from the confined guessing technique of Böhl et al. (Eurocrypt'13) that was used to construct previous standard model short signature schemes with short verification keys by Ducas and Micciancio (Crypto'14) and by Alperin-Sheriff (PKC'15) and allow us to achieve much tighter security from weaker hardness assumptions.

Leveled Fully Homomorphic Signatures Based on Standard Lattices

Linearly Homomorphic Signature with Tight Security on Lattice

Lattice-Based Linearly Homomorphic Signature Scheme over F 2

An efficient certificateless signature scheme on lattice

Lattice-Based Ring Signature Scheme under the Random Oracle Model

A structure-preserving linearly homomorphic signature scheme with designated combiner

A survey on lattice-based digital signature

Lattice-Based Programmable Hash Functions and Applications

Efficient Lattice-Based Threshold Signatures With Functional Interchangeability

A 2D Cryptographic Hash Function Incorporating Homomorphic Encryption for Secure Digital Signatures

An Undeniable Signature Scheme Utilizing Module Lattices

Identity-Based Signcryption from Lattices

Short Identity-Based Signatures with Tight Security from Lattices

Pre-image Sample Algorithm with Irregular Gaussian Distribution and Construction of Identity-Based Signature

Compact Lattice Gadget and Its Applications to Hash-and-Sign Signatures

Efficient Lattice-Based Signcryption in Standard Model

Quantum Homomorphic Encryption for Circuits of Low T-gate Complexity

An Unbounded Fully Homomorphic Encryption Scheme Based on Ideal Lattices and Chinese Remainder Theorem

NTRU-Based Fully Homomorphic Signature

Identity-Based Linkable Ring Signature on NTRU Lattice

A Lattice-Based Certificateless Traceable Ring Signature Scheme