Improving the exact security of digital signature schemes

Journal of Cryptology

Volumn 15, Issue 1, 2002, Pages 1-18

  Micali, Silvio ^a   Reyzin, Leonid ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Digital signatures; Exact security; ID schemes; Random oracles

Indexed keywords

COMPUTATION THEORY; COSTS; DATA PRIVACY; PUBLIC KEY CRYPTOGRAPHY; RANDOM PROCESSES; SECURITY OF DATA;

EXACT SECURITY; ID SCHEMES; RANDOM ORACLES;

ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS;

EID: 0344839013     PISSN: 09332790     EISSN: 14321378     Source Type: Journal    
DOI: 10.1007/s00145-001-0005-8     Document Type: Article

References (24)

1. [BR1] Mihir Bellare and Phillip Rogaway. Random oracles are practical: a paradigm for designing efficient protocols. In Proceedings of the 1st ACM Conference on Computer and Communication Security, November 1993, pages 62-73. Revised version appears in http://www-cse.uesd.edu/users/mihir/papers/crypto- papers.html.
2. [BR2] Mihir Bellare and Phillip Rogaway. The exact security of digital signatures: how to sign with RSA and Rabin. In [Ma], pages 399-416. Revised version appears in http://www-cse.ucsd.edu/users/mihir/paperscrypto-papers.html.
3. [FFS] Uriel Feige, Amos Fiat, and Adi Shamir. Zero-knowledge proofs of identity. Journal of Cryptology, 1(2):77-94, 1988.
4. [FS] Amos Fiat and Adi Shamir. How to prove yourself: practical solutions to identification and signature problems. In [Od], pages 186-194.
5. [GMR] Shafi Goldwasser, Silvio Micali, and Ronald L. Rivest. A digital signature scheme secure against adaptive chosen-message attacks. SIAM Journal on Computing, 17(2):281-308, April 1988.
6. [Gol] Oded Goldreich. Two remarks concerning the Goldwasser-Micali-Rivest signature scheme. In [Od], pages 104-110.
7. [Go2] Shafi Goldwasser, editor. Advances in Cryptology - CRYPTO '88, volume 403 of Lecture Notes in Computer Science. Springer-Verlag, Berlin, 1990.
8. [GQ] Louis Claude Guillou and Jean-Jacques Quisquater. A "paradoxical" indentity-based signature scheme resulting from zero-knowledge. In [Go2], pages 216-231.
9. [LL] Arjen K. Lenstra and Hendrik W. Lenstra, editors. The Development of the Number Field Sieve, volume 1554 of Lecture notes in Mathematics. Springer-Verlag, Berlin, 1993.
10. [Ma] Ueli Maurer, editor. Advances in Cryptology - EUROCRYPT 96, volume 1070 of Lecture Notes in Computer Science. Springer-Verlag, Berlin, 1996.
11. [Mi] Silvio Micali. A secure and efficient digital signature algorithm. Technical Report MIT/LCS/TM-501, Massachusetts Institute of Technology, Cambridge, MA, March 1994.
12. [MR] Silvio Micali and Leonid Reyzin. Improving the exact security of Fiat-Shamir signature schemes. In R. Baumgart, editor, Secure Networking - CQRE [Secure] '99, volume 1740 of Lecture Notes in Computer Science, pages 167-182. Springer-Verlag, Berlin, 1999.
13. [MS] Silvio Micali and Adi Shamir. An improvement of the Fiat-Shamir identification and signature scheme. In [Go2], pages 244-247.
14. [Od] Andrew M. Odlyzko, editor. Advances in Cryptology - CRYPTO '86, volume 263 of Lecture Notes in Computer Science. Springer-Verlag, Berlin, 1987.
15. [Ok] Tatsuaki Okamoto. Provably secure and practical identification schemes and corresponding signature schemes. In E. F. Brickell, editor. Advances in Cryptology - CRYPTO '92, volume 740 of Lecture Notes in Computer Science, pages 31-53. Springer-Verlag, Berlin, 1993.
16. [OO1] Kazuo Ohta and Tatsuaki Okamoto. A modification of the Fiat-Shamir scheme. In [Go2], pages 232-243.
17. [OO2] Kazuo Ohta and Tatsuaki Okamoto. On concrete security treatment of signatures derived from identification. In H. Krawczyk, editor, Advances in Cryptology - CRYPTO '98, volume 1462 of Lecture Notes in Computer Science, pages 354-369. Springer-Verlag, Berlin, 1998.
18. [OS] H. Ong and Claus P. Schnorr. Fast signature generation with a Fiat-Shamir-like scheme. In I. B. Damgård, editor, Advances in Cryptology - EUROCRYPT 90, volume 473 of Lecture Notes in Computer Science, pages 432-440. Springer-Verlag, Berlin, 1991.
19. [PS 1] David Pointcheval and Jacques Stern. Security proofs for signature schemes. In [Ma], pages 387-398.
20. [PS2] David Pointcheval and Jacques Stern. Security arguments for digital signatures and blind signatures. Journal of Cryptology, 13(3):361-396, 2000.
21. [Sc1] Claus P. Schnorr. Efficient identification and signatures for smart cards. In J.-J. Quisquater and J. Vandewalle, editors, Advances in Cryptology-EUROCRYPT 89, volume 434 of Lecture Notes in Computer Science, pages 688-689. Springer-Verlag, Berlin, 1990.
22. t-root identification and signatures. In N. Koblitz, editor, Advances in Cryptology - CRYPTO '96, volume 1109 of Lecture Notes in Computer Science, pages 143-156. Springer-Verlag, Berlin, 1996.
23. [Sh] Victor Shoup. On the security of a practical identification scheme. In [Ma], pages 344-353.
24. [Wi] Hugh C. Williams. A modification of the RSA public-key encryption procedure. IEEE Transactions on Information Theory, IT-26(6):726-729, November 1980.