[PDF] Top 20 Strongly Unforgeable Proxy Re-Signatures in the Standard Model

... Proxy Re-Cryptography originally introduced by Blaze ...the re- search ...schemes. Proxy Re-Signature and Proxy Re-Encryption schemes are the essential primitives in this ... See full document

... the signatures, but also the public key, was the main open problem left by [CHKP12, Boy10, MP12, ABB10b, ...lattice signatures in the random oracle model [GPV08, Lyu09, Lyu12, GLP12, DDLL13, BG14], ... See full document

... a standard- model LIT using the VRF by Dodis and Yampolskiy ...a standard-model LIT for a large basename space could be constructed at the cost of using an interactive ...full model of ... See full document

... group signatures schemes ([7], [17]) that have been proposed are proven secure in the random oracle model ...the standard model with respect to ...the standard model but proved ... See full document

... blind signatures. Partially blind signatures are an extension of blind signa- tures, which additionally allow to include common information in a ...blind signatures in the standard ...blind ... See full document

... Group signatures are a central cryptographic primitive which allows users to sign messages while hiding their identity within a crowd of group ...the standard model (without the ran- dom oracle ... See full document

... digital signatures to certificateless signatures and defined the security model of this kind of cryptographic ...is strongly unforgeable without using the random oracle ... See full document

... under re-randomizable ...known unforgeable signature schemes that have re-randomizable ...have re-randomizable keys, but are insecure with respect to our stronger security ...has ... See full document

... forging signatures on previously signed ...existentially unforgeable IBS schemes to strongly un- forgeable ones [8, ...efficient strongly unforgeable IBS schemes in the standard ... See full document

... random-oracle model (RO), where a hash function is treated as a truly random function and all users evaluate the hash function by querying the random ...random-oracle model (QRO) ... See full document

... bidirectional proxy re-signature which is existentially unforgeable in the standard model and the first ID-based proxy re-signature ...unidirectional proxy ... See full document

... a standard mathematical problem (weak assumption) to the problem of breaking a cryptosystem in a standard ...two standard mathematical problems for cryptographic pro- tocol ...existentially ... See full document

... weakly unforgeable signature scheme in the second step, then get a strongly unforgeable ...weakly unforgeable and resilient to hard-to-invert leak- age to a strongly unforgeable ... See full document

... Although pairing is an expensive operation, only a few pairing-free unidirectional PRE schemes have been proposed in the literature, of which only one scheme due to Chow et al. [8] reported the collusion-resistance ... See full document

... Most of the PRE constructions found in literature are either in the public key setting or in the identity (ID) based setting. In the public key setting, there is a need to authenticate the public key of users. For this ... See full document

... “atomic proxy cryptography” by Blaze, Bleumer and Strauss [BBS98], who constructed a multi-hop scheme under the decisional Diffie-Hellman ...the proxy, as required by their application to access control for ... See full document

... The uncertainty measures suggested in the literature can be divided into direct survey-based measures and indirect survey-based measures. 4 The direct survey-based measures of uncertainty are derived by eliciting a ... See full document

... (RO) model in which a hash function is assumed fully ...the proxy, all ciphertexts can be reencrypted and then be accessible to the intended users; else none of the ciphertexts can be re-encrypted or ... See full document

... gives rise to two levels of key-dependent message security, depending on whether the adversary is allowed to ask for encryptions of functions of the master-keys or the user-keys. We choose here to deal only with master ... See full document

... Abstract—This paper studies security on home network to apply access control and encryption. It is difficult to implement and run a database server for access control as individual. For both access control and ... See full document