Optimal Public Key Traitor Tracing Scheme in Non-Black Box Model

Guillot, Philippe; Nimour, Abdelkrim; Phan, Duong Hieu; Trinh, Viet Cuong

doi:10.1007/978-3-642-38553-7_8

Cited by 5 publications

(1 citation statement)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Secret-key Public-key Signing Verifying [3] 1|G| 1|G| + 1| | 2|G| + + 3 3P + 1H [4] 1|G|+ 1| | 2| | 2|G| 2 + 2 ( + 3)exp + 2H [5] ( + 1)|G| 1|G|+ 1| | 2|G| 4 exp + 3 H 2 exp + 3P (3 + 1)H Ours 3|G|+ 1|G| 3|G|+ 1| | 3|G|+ (n + 3)|G| (2 + 9)exp + (2 + 1)H ( + 1)exp + 3P+(2 + 1)H time. Second, using direct approach [14,15], which leads to quite efficient resulted schemes (constant-size of both public parameters and signature, as well as efficient computing time); however these schemes are only secure under strong assumptions (generalization of the Diffie-Hellman exponent assumption, GDDHE assumption), although GDDHE assumption introduced by Boneh and Boyen at Eurocrypt'05 [16] now has been accepted widely by researchers [17][18][19][20][21][22]. Aggregate Signature.…”

Section: Signaturementioning

confidence: 99%

A Short Server-Aided Certificateless Aggregate Multisignature Scheme in the Standard Model

Trinh

2019

Security and Communication Networks

Self Cite

View full text Add to dashboard Cite

Aggregate signature scheme allows each signer to sign a different message and then all those signatures are aggregated into a single short signature. In contrast, multisignature scheme allows multisigners to jointly sign only one message. Aggregate multisignature scheme is a combination of both aforementioned signature schemes, where signers can choose to generate either a multisignature or an aggregate signature. This combination scheme has many concrete application scenarios such as Bitcoin blockchain, Healthcare, Multicast Acknowledgment Aggregation, and so on. On the other hand, to deal with the problems of expensive certificates in certified public key cryptography and key escrow in identity-based cryptography, the notion of certificateless public key cryptography has been introduced by Riyami and Paterson at Asiacrypt'03. In this paper, we propose the first certificateless aggregate multisignature scheme that achieves the constant-size of signature and is secure in the standard model under a generalization of the Diffie-Hellman exponent assumption. In our scheme, however, the signature is generated with the help of the authority.

show abstract