• No results found

[PDF] Top 20 Improved (Almost) Tightly-Secure Structure-Preserving Signatures

Has 10000 "Improved (Almost) Tightly-Secure Structure-Preserving Signatures" found on our website. Below are the top 20 most common "Improved (Almost) Tightly-Secure Structure-Preserving Signatures".

Improved (Almost)  Tightly-Secure  Structure-Preserving  Signatures

Improved (Almost) Tightly-Secure Structure-Preserving Signatures

... adjust signatures for messages in one of the two sets so that after logarithmic number of steps (say, in the size of the tag space) all modified signatures hide the ...to structure-preserving ... See full document

30

Improved (Almost)  Tightly-Secure  Simulation-Sound  QA-NIZK  with  Applications

Improved (Almost) Tightly-Secure Simulation-Sound QA-NIZK with Applications

... of structure-preserving USS-QA-NIZK from Section ...as signatures, the USS-QA-NIZK can be considered as a signature scheme for message space consisting of no-instances, and the notion of unbounded ... See full document

49

Tightly-Secure  Signatures  from  Chameleon  Hash  Functions

Tightly-Secure Signatures from Chameleon Hash Functions

... flat-tree signatures with improved ...two-tier signatures TTSig (a generalization of two-tier signatures [7] to any d ≥ 1), we build flat d-ary (instead of binary, 2-ary) trees via our second ... See full document

22

Tightly-Secure  Authenticated  Key  Exchange

Tightly-Secure Authenticated Key Exchange

... the tightly secure (without corruptions) signature scheme from [HJ12a, ADK + 13] and the Groth-Sahai non-interactive proof system [GS08] will be suitable DLIN-based building ...recent ... See full document

36

More  Efficient (Almost)  Tightly  Secure  Structure-Preserving  Signatures

More Efficient (Almost) Tightly Secure Structure-Preserving Signatures

... The currently most efficient non-tightly secure SPS schemes are due to Jutla and Roy [38] and Kiltz, Pan, and Wee [40]. Table 2 compares the computational complexity of their verification operation with the ... See full document

32

Structure-Preserving  Signatures  from  Standard  Assumptions,  Revisited

Structure-Preserving Signatures from Standard Assumptions, Revisited

... fully secure SPS requires at least 2 verification equations, at least 3 group elements, the 3 elements not all the same group (for Type III asymmetric ...one-time secure SPS against random message attack ... See full document

26

Structure-Preserving  Signatures  from  Type  II  Pairings

Structure-Preserving Signatures from Type II Pairings

... 3-element signatures cannot be proved secure under a non-interactive assumption using black-box reductions, so strong assumptions are needed to get optimal efficiency in the Type III ...optimal ... See full document

16

Further  Lower  Bounds  for  Structure-Preserving  Signatures  in  Asymmetric  Bilinear  Groups

Further Lower Bounds for Structure-Preserving Signatures in Asymmetric Bilinear Groups

... Structure-Preserving Signatures (SPSs) [4] are signature schemes over bilinear groups where the messages, the verification key and the signatures consist of only group elements from ... See full document

19

Weakly  Secure  Equivalence-Class  Signatures  from  Standard  Assumptions

Weakly Secure Equivalence-Class Signatures from Standard Assumptions

... EQS. Structure-preserving signatures on equivalence classes, or equivalence- class signatures (EQS) for short, allow similar applications to ...Equivalence-class signatures were ... See full document

31

Fully  Structure-Preserving  Signatures   and  Shrinking  Commitments

Fully Structure-Preserving Signatures and Shrinking Commitments

... shrinking structure- preserving trapdoor commitment scheme ...construct secure signature schemes that achieve existential unforgeability against adaptive chosen message attacks [31] in combination ... See full document

29

Constant-Size  Structure-Preserving  Signatures:  Generic  Constructions   and  Simple  Assumptions

Constant-Size Structure-Preserving Signatures: Generic Constructions and Simple Assumptions

... one-time signatures and signatures secure against extended random message attacks ...one-time signatures, denoted by POS, are one-time signatures for which only a part of the one-time ... See full document

32

Lower  Bounds  on  Structure-Preserving  Signatures  for  Bilateral  Messages

Lower Bounds on Structure-Preserving Signatures for Bilateral Messages

... Our approach follows the framework of [4], i.e., we show the existence of a crucial relation (see Sec- tion 2.7) in the algebraic model [11, 17]. It is known that if such a relation exists, a meta-reduction [13] can be ... See full document

21

Efficient  Fully  Structure-Preserving  Signatures  for  Large  Messages

Efficient Fully Structure-Preserving Signatures for Large Messages

... Proof. Perfect correctness, perfect randomizability and structure-preservation follows by inspection. What remains now is to prove that the signature scheme is C-EUF-CMA secure in the generic group model. ... See full document

22

Structure-Preserving  Signatures  on  Equivalence  Classes   and  Constant-Size  Anonymous  Credentials

Structure-Preserving Signatures on Equivalence Classes and Constant-Size Anonymous Credentials

... + signatures [BBS04, ASM06], which cover a broad class of ABC schemes from randomizable signature schemes with efficient proofs of ...provable secure version [BL13]) for the sake of completeness, although ... See full document

39

Short  Group  Signatures  via  Structure-Preserving  Signatures:  Standard  Model  Security  from  Simple  Assumptions

Short Group Signatures via Structure-Preserving Signatures: Standard Model Security from Simple Assumptions

... Group signatures are a central cryptographic primitive which allows users to sign messages while hiding their identity within a crowd of group ...The structure-preserving signatures of Abe et ... See full document

53

Tightly  Secure  Signatures   and  Public-Key  Encryption

Tightly Secure Signatures and Public-Key Encryption

... our tightly simulation-sound proof system into the construction of [14] yields a PKE scheme that is tightly chosen-ciphertext secure even under key-dependent message ...Besides, ... See full document

35

Practical   and  Tightly-Secure  Digital  Signatures   and  Authenticated  Key  Exchange

Practical and Tightly-Secure Digital Signatures and Authenticated Key Exchange

... as long as these corruptions do not allow the adversary to trivially win the se- curity experiment (e.g., because it is able to corrupt a communication partner before the key is computed, such that the attacker can ... See full document

36

Tightly-Secure  Signatures  From  Lossy  Identification  Schemes

Tightly-Secure Signatures From Lossy Identification Schemes

... building secure signature schemes as failed impersonation attempts will be kept hidden from the adversary since the tasks of generating the commitment and challenge are performed by the ... See full document

24

Tightly-Secure  PAK(E)

Tightly-Secure PAK(E)

... When evaluating different PAKE designs, two main criteria are the protocol’s efficiency in terms of computation and communication, and the security guarantees that the protocol provides. Of these two criteria, the ... See full document

16

A  Framework  for  Identity-Based  Encryption  with   Almost  Tight  Security

A Framework for Identity-Based Encryption with Almost Tight Security

... with almost tight security reduction in the multi-instance and multi- challenge setting yield almost tightly CCA secure PKE in the same setting via simple modification of Canetti- Halevi-Katz ... See full document

70

Show all 10000 documents...