[PDF] Top 20 A Code-Based Group Signature Scheme

... first code-based group sig- nature. The new group signature scheme we present here has numerous advantages over all existing post-quantum constructions and even competes (in ... See full document

... lattice based group signature scheme is given in (Gordon et ...of group N, the size of signatures gener- ated by the schemes in (Gordon et ...the signature was lowered up to O ( ... See full document

... The code is constructed in such a way that, starting from the two sides disclosed, one can determine the identity of the buyer, which can be achieved using a single ...encryption scheme C, so that the money ... See full document

... digital signature algorithm (ECDSA) is well established digital signature scheme based on the discrete logarithms ...signature scheme. In this paper we compare the security of ... See full document

... In that case one knows that there is a certain vector of given weight w in the matrix G (dual of H ). The type of matrix for this case corresponds exactly to the case of the NTRU problem in the case of q = 2. We first ... See full document

... lattice-based signature schemes without resorting to any trapdoor (such as GPV [6] or NTRU ...a signature as a noisy syndrome decoding problem, which can be handled efficiently using the extended bit ... See full document

... new scheme, which is the combina- tion of proxy group signature and identity-based group signature, based on designated hierarchical proxy archi- tecture for ... See full document

... McEliece scheme, and it can be used for constructing of digital signature ...practical code-based signature scheme called CFS ...encryption scheme [5] in a way that a ... See full document

... Applying group signatures [21] could be a solution where a verifier can anonymously verify a signer (vehicle), about which there have been numerous studies, ...authentication scheme, in which messages are ... See full document

... multi-signature scheme (i.e., a protocol which allows a group of signers to produce a short, joint signature on a common message) called MuSig, provably secure in the plain public-key model ... See full document

... is based on binary Merkle trees [47], instantiated such that all nodes except for the root can be generated “on the ...one-time signature scheme from Section ...a signature over their ... See full document

... derive signature schemes from the previous identification schemes using the Fiat-Shamir ...Stern scheme, but it was more a proof of concept than an efficient ... See full document

... the signature scheme built from ...FDH signature scheme which is shown to be existentially unforgeable under a chosen-message attack (EUF-CMA) with a tight reduction to solving two ... See full document

... cryptographic scheme. In 2010, Islam et al.[14] proposed secure digital signature scheme based on elliptic curve bilinear pairing whose security is based on ...identification ... See full document

... In this section we prove that subgroup hiding implies all the q-type assumptions that belong to bilin- ear target assumption (BTA) family. Recall that Chase-Meiklejohn’s [CM14] D´ ej` aQ framework ensure the reduction ... See full document

... ring signature scheme based on multivariate polyno- mial ...identification scheme of [16] to a threshold ring identification scheme and applying the Fiat-Shamir paradigm [11] to ... See full document

... lattice-based group signature scheme whose cryptographic artifacts are of size small enough to be usable in practice: for a group of 2 25 users, signatures take 910 kB and public keys ... See full document

... published code-based signature schemes: CFS [7] and RankSign [18] (see also SURF [8]), but for these schemes the public key can be distinguished from a random matrix [11], ...for signature, ... See full document

... A Group signature protocol is a cryptographic scheme that decouples a user identity and location from verification procedure during ...a group signature scheme, a user is allowed ... See full document

... Digital signatures are computed based on the documents (message/ information) that need to be signed and it is done on some private information held only by the sender. In practice, instead of using the whole ... See full document