Abstract:We consider the problem of outsourcing computation on data authenticated by different users. Our aim is to describe and implement the simplest possible solution to provide data integrity in cloud-based scenarios. Concretely, our multi-key linearly homomorphic signature scheme (mklhsdocumentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$${mathsf {mklhs}}$$end{document}) allows users to upload signed data on a server, and at any later point in time any third party can query the server to compute a linear combination of data authenticated by different users and check the correctness of the returned result. Our construction generalizes Boneh et al.’s linearly homomorphic signature scheme (PKC’09 [7]) to the multi-key setting and relies on basic tools of pairing-based cryptography. Compared to existing multi-key homomorphic signature schemes, our mklhsdocumentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$${mathsf {mklhs}}$$end{document} is a conceptually simple and elegant direct construction, which trades-off privacy for efficiency. The simplicity of our approach leads us to a very efficient construction that enjoys significantly shorter signatures and higher performance than previous proposals. Finally, we implement mklhsdocumentclass[12pt]{minimal}usepackage{amsmath}usepackage{wasysym}usepackage{amsfonts}usepackage{amssymb}usepackage{amsbsy}usepackage{mathrsfs}usepackage{upgreek}setlength{oddsidemargin}{-69pt}egin{document}$${mathsf {mklhs}}$$end{document} using two different pairing-friendly curves at the 128-bit security level, a Barreto-Lynn-Scott curve and a Barreto-Naehrig curve. Our benchmarks illustrate interesting performance trade-offs between these parameters, involving the cost of exponentiation and hashing in pairing groups. We provide a discussion on such trade-offs that can be useful to other implementers of pairing-based protocols.

Lattice-Based Linearly Homomorphic Signature Scheme over F 2

Linearly Homomorphic Signature with Tight Security on Lattice

Leveled Fully Homomorphic Signatures Based on Standard Lattices

Efficient Forward Secure Identity-Based Shorter Signature from Lattice.

Fuzzy Identity-Based Signature Scheme from Lattice and Its Application in Biometric Authentication

Efficient Lattice-Based Ring Signature Scheme

A structure-preserving linearly homomorphic signature scheme with designated combiner

Efficient Hierarchical Identity-Based Signatures from Lattices

Identity-Based Signatures From Lattices: Simpler, Faster, Shorter

Identity-based Signatures from Lattices

A New Hierarchical Identity-based Signature Scheme from Lattices in the Standard Model.

Efficient and Strongly Unforgeable Identity-Based Signature Scheme from Lattices in the Standard Model.

A survey on lattice-based digital signature

Hierarchical ID-Based Blind Signature from Lattices

An efficient certificateless signature scheme on lattice

Lattice-Based Universal Designated Verifier Signatures

New Lattice Two-Stage Sampling Technique and Its Applications to Functional Encryption - Stronger Security and Smaller Ciphertexts

Lattice-based Proxy Signature Scheme with Reject Sampling Method

Certificateless and certificate-based signatures from lattices: Certificateless and certificate-based signatures from lattices

The Simplest Multi-key Linearly Homomorphic Signature Scheme

Lattice-Based Ring Signature Scheme under the Random Oracle Model