Abstract:In a 1-out-of -n oblivious signature scheme, a user pro-vides a set of messages to a signer for signatures but he/she can only obtain a valid signature for a specific message chosen from the message set. There are two security requirements for 1-out-of -n oblivious signature. The first is ambiguity, which requires that the signer is not aware which message among the set is signed. The other one is unforgeability which requires that the user is not able to derive any other valid signature for any messages beyond the one that he/she has chosen. In this paper, we provide a generic construction of 1-out-of -n oblivious signature. Our generic construction consists of two building blocks, a commitment scheme and a standard signature scheme. Our construction is round efficient since it only asks one interaction (i.e., two rounds) between the user and signer. Meanwhile, in our construction, the ambiguity of the 1-out-of -n oblivious signature scheme is based on the hiding property of the underlying commitment, while the unforgeability is based on the binding property of the underlying commitment scheme and the unforgeability of the underlying signature scheme. Moreover, our construction can also enjoy strong unforgeability as long as the underlying building blocks have strong binding property and strong unforgeability respectively. Given the fact that commitment and digital signature are well-studied topics in cryptography and numerous concrete schemes have been proposed in the standard model, our generic construc-tion immediately yields a bunch of instantiations in the standard model based on well-known assumptions, including not only traditional assump-tions like Decision Diffie-Hellman (DDH), Decision Composite Residue (DCR), etc., but also some post-quantum assumption like Learning with Errors (LWE). As far as we know, our construction admits the first 1-out -of -n oblivious signature schemes based on the standard model.

Blind Spontaneous Anonymous Group Signatures for Ad Hoc Groups

Oblivious Blind Rendezvous for Anonymous Users

Blind one-time signature and its applications

CSI-Otter: isogeny-based (partially) blind signatures from the class group action with a twist

Publicly Auditable Conditional Blind Signatures.

A New Threshold Ring Signature for Ad-hoc Group

Anonymous Signature Schemes

A General Blind Signature Scheme Based on the Discrete Logarithm Problem

A New Group Signature Scheme for Dynamic Membership.

Hierarchical ID-Based Blind Signature from Lattices

Partial Blind Signatures Based on Nyberg-Rueppel Signature

Generic Construction of 1-out-of-n Oblivious Signatures

A Round-Optimal Lattice-Based Blind Signature Scheme for Cloud Services

Improved Threshold Ring Signature For Ad-Hoc Group

Fully Adaptive Attribute-Based Group Signature in Standard Model

A New Certificateless Blind Signature Scheme

A Multi-Group Signature Scheme From Lattices

Efficient Code-Based Fully Dynamic Group Signature Scheme

Novel Efficient Certificate Less Blind Signature Schemes

Non-interactive Identity-Based Threshold Signature Scheme Without Random Oracles

Half-Aggregation of Schnorr Signatures with Tight Reductions