Trapdoor signatures

• Chameleon Signatures []
  • Chameleon Hashing and Signatures (Krawczyk, Rabin, 1997)
  • Chameleon Signature from Bilinear Pairing (Xinjun Du and Ying Wang and Jianhua Ge and Yumin Wang, eprint 2003/038)
  • Identity-based Chameleon Hash and Applications (Giuseppe Ateniese, Breno de Medeiros, FC 2004)
  • Chameleon Hashing without Key Exposure (Xiaofeng Chen and Fangguo Zhang and Kwangjo Kim, ISC 2004 & eprint 2004/038)
• Designated Verifier Signatures []
  • Designated Verifier Proofs and Their Applications ( Markus Jakobsson, Kazue Sako, Russell Impagliazzo, 1996)
  • Abuse-free Optimistic Contract Signing ( Juan Garay, Markus Jakobsson, Philip MacKenzie, 1999)
  • 2003
    • Universal Designated-Verifier Signatures (Ron Steinfeld, Laurence Bull, Huaxiong Wang and Josef Pieprzyk, ASIACRYPT 2003)
    • Efficient and provably secure designated verifier signature schemes from bilinear maps (F. Laguillaumie, D. Vergnaud, 2003)
    • An Attack on Not-interactive Designated Verifier Proofs for Undeniable Signatures (Guilin Wang, eprint 2003/243)
    • Efficient designated verifier signature schemes (Shahrokh Saeednia, Steve Kremer and Olivier Markowitch, Inf. Th. @ Benelux 2003)
    • An Efficient Strong Designated Verifier Signature Scheme ( Shahrokh Saeednia, Steve Kremer, and Olivier Markowitch, ICICS 2003)
    • Efficient Extension of Standard Schnorr/RSA signatures into Universal Designated-Verifier Signatures (Ron Steinfeld, Huaxiong Wang, Josef Pieprzyk, eprint 2003/193)
  • 2004
    • Signature scheme with message recovery and its application (Malapati Raja Sekhar, 2004)
    • Identity-based Strong Designated Verifier Signature Schemes (Willy Susilo, Fangguo Zhang, and Yi Mu, ACISP 2004)
    • Designated-Verifier Proxy Signatures For E-Commerce (Guilin Wang, ICME 2004)
    • Limited Verifier Signature from Bilinear Pairings (Xiaofeng Chen, Fangguo Zhang and Kwangjo Kim)
    • Designated Verifier Signatures: Anonymity and Efficient Construction from any Bilinear Map (Fabien Laguillaumie, Damien Vergnaud, SCN 2004)
  • 2005
    • Designated Verifier Signature Schemes: Attacks, New Security Notions and A New Construction (Helger Lipmaa, Guilin Wang and Feng Bao, ICALP 2005)
    • Universal Designated Multi Verifier Signature Schemes (Ching Yu Ng, Willy Susilo, Yi Mu, In Proceedings of the International Workshop on Security in Networks and Distributed Systems (SNDS 2005), Japan, IEEE Press, 2005 (accepted))
    • Short Signature and Universal Designated Verifier Signature Without Random Oracles (Rui Zhang II, Jun Furukawa, Hideki Imai, ACNS 2005)
    • On Delegatability of Four Designated Verifier Signatures (Yong Li, Helger Lipmaa and Dingyi Pei, ICICS 2005)
  • 2006
    • Short (Identity-based) Strong Designated Verifier Signature Schemes (Xinyi Huang, Willy Susilo, Yi Mu and Futai Zhang, ISPEC 2006)
    • Further Discussions on the Security of a Nominative Signature Scheme (Lifeng Guo, Guilin Wang, and Duncan S. Wong, eprint 2006/007)
    • Efficient Authentication for Reactive Routing Protocols (Raghav Bhaskar, Javier Herranz, Fabien Laguillaumie, SNDS 2006)
    • Identity Based Strong Designated Verifier Signature Scheme (K. Phani Kumar, G. Shailaja, Ashutosh Saxena, eprint 2006/134)
    • Universal Designated Verifier Signatures Without Random Oracles or Non-Black Box Assumptions Fabien Laguillaumie, Benoit Libert, Jean-Jacques Quisquater, scn 2006 (06.06.06)
  • 2007
    • On the Soundness of Restricted Universal Designated Verifier Signatures and Dedicated Signatures (Fabien Laguillaumie, Damien Vergnaud, ISC 2007)
• Ring Signatures []
  • How to Leak a Secret? (Rivest, Shamir, Tauman, Asiacrypt 2001)
  • ID-Based Blind Signature and Ring Signature from Pairings (Fangguo Zhang and Kwangjo Kim, 2002)
  • An improved identity-based ring signature scheme from bilinear pairings (Chunming Tang, Zhuojun Liu, Mingsheng Wang, 2003)
  • Threshold Ring Signature Scheme Based on the Curve (Hidenori Kuwakado, Hatsukazu Tanaka, 2003)
  • Non-interactive deniable ring authentication (Willy Susilo and Yi Mu, ICISC'03, LNCS 2971, pp. 386-401)
  • Forking Lemmas for Ring Signature Schemes (Javier Herranz and Germán Sáez, Indocrypt 2003)
  • Deniable Ring Authentication Revisited (Willy Susilo and Yi Mu, ACNS'04)
  • Identity-based Strong Designated Verifier Signature Schemes (Willy Susilo, Fangguo Zhang, and Yi Mu, ACISP'04)
• Applications
  • Efficient Receipt-Free Voting Based on Homomorphic Encryption (Martin Hirt and Kazue Sako, Eurocrypt 2000)
  • Voting with designated verifier signature-like protocol (Emmanuel Dall'Olio and Olivier Markowitch, 2004)
• Bibliography on Undeniable Signatures (Guilin Wang)
• @Undeniable signatures

  ---

  General information

  In designated verifier signatures, a signer signs a message, byusing her secret key and designated verifier's public key. It can satisfy several security properties, the most common ones being unforgeability (given only randomly chosen public keys of the participants, it is computationally hard to forge signatures) and non-transferability (the designated verifier can, given his secret key and signer's public key, generate a valid signature).

  Some more advanced requirements are: private verifiability (to verify a signature, one must know the secret key of the designated verifier), non-delegatability (one can forge signatures only if one knows either of the two secret keys --- this is a stricter requirement than unforgeability!), disavowability (given a valid signature, produced by the designated verifier, signer can prove that it was produced by the designated verifier). Not all DVS schemes satisfy these requirements. (See [LipmaaWangBao2005] for discussion about non-delegatability and disavowability.)

  See [JakobssonSakoImpagliazzo1996] for the original definition. A chameleon signature scheme is like a designated verifier signature scheme, except that the designated verifier will be able to forge a signature only after seeing a valid signature on some message. This makes it possible to construct much more efficient chameleon signature schemes. See [KrawczykRabin2000] for the original definition.

  ---

---

Cryptology Pointers by Helger Lipmaa
Got any suggestions or additional links? Mail to <lipmaa>research.cyber.ee
NB! If you find any broken links, please be kind and report them to me together with their current location!

(C) Helger Lipmaa 1997-2009.