Security proofs for identity-based identification and signature schemes

Journal of Cryptology

Volumn 22, Issue 1, 2009, Pages 1-61

  Bellare, Mihir ^a   Namprempre, Chanathip ^b   Neven, Gregory ^c  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b THAMMASAT UNIVERSITY   (Thailand)

^c IBM RESEARCH ZURICH   (Switzerland)

Author keywords

Identification schemes; Identity based cryptography; Security proofs; Signatures

Indexed keywords

IDENTIFICATION SCHEMES; IDENTITY-BASED; IDENTITY-BASED CRYPTOGRAPHY; RANDOM ORACLES; SECURITY ANALYSIS; SECURITY PROOFS; SIGNATURE SCHEMES; SIGNATURES;

CRYPTOGRAPHY;

EID: 64249165649     PISSN: 09332790     EISSN: 14321378     Source Type: Journal    
DOI: 10.1007/s00145-008-9028-8     Document Type: Article

References (48)

1. M. Abdalla, J.H. An, M. Bellare, C. Namprempre, From identification to signatures via the Fiat-Shamir transform: Minimizing assumptions for security and forward-security, in EUROCRYPT 2002, ed. by L. Knudsen. LNCS, vol. 2332 (Springer, New York, 2002), pp. 418-433
2. J.H. An, Y. Dodis, T. Rabin, On the security of joint signature and encryption, in EUROCRYPT 2002, ed. by L. Knudsen. LNCS, vol. 2332 (Springer, New York, 2002), pp. 83-107
3. M. Bellare, C. Namprempre, Authenticated encryption: Relations among notions and analysis of the generic composition paradigm, in ASIACRYPT 2000, ed. by T. Okamoto. LNCS, vol. 1976 (Springer, New York, 2000), pp. 531-545
4. M. Bellare G. Neven 2005 Transitive signatures: New schemes and proofs IEEE Trans. Inf. Theory 51 6 2133 2151
5. M. Bellare, A. Palacio, GQ and Schnorr identification schemes: Proofs of security against impersonation under active and concurrent attack, in CRYPTO 2002, ed. by M. Yung. LNCS, vol. 2442 (Springer, New York, 2002), pp. 162-177
6. M. Bellare, P. Rogaway, Random oracles are practical: A paradigm for designing efficient protocols, in Proc. of the 1st CCS (ACM Press, New York, 1993), pp. 62-73
7. M. Bellare, M. Fischlin, S. Goldwasser, S. Micali, Identification protocols secure against reset attacks, in EUROCRYPT 2001, ed. by B. Pfitzmann. LNCS, vol. 2045 (Springer, New York, 2001), pp. 268-286
8. M. Bellare C. Namprempre D. Pointcheval M. Semanko 2003 The one-more-RSA-inversion problems and the security of Chaum's blind signature scheme J. Cryptol. 16 3 185 215
9. M. Bellare, C. Namprempre, G. Neven, Security proofs for identity-based identification and signature schemes, in EUROCRYPT 2004, ed. by C. Cachin, J. Camenisch. LNCS, vol. 3027 (Springer, New York, 2004), pp. 268-286
10. T. Beth, Efficient zero-knowledged identification scheme for smart cards, in EUROCRYPT 1988, ed. by C. Gunther. LNCS, vol. 330 (Springer, New York, 1988), pp. 77-86
11. M. Blum, Coin flipping by telephone, in Advances in Cryptology: A Report on CRYPTO 81, ed. by A. Gersho (University of California, Santa Barbara, 1982), Department of ECE Report No 82-04, pp. 11-15
12. A. Boldyreva, Threshold signatures, multisignatures and blind signatures based on the gap-diffie-hellman-group signature scheme, in PKC 2003, ed. by Y. Desmedt. LNCS, vol. 2567 (Springer, New York, 2003), pp. 31-46
13. D. Boneh, M.K. Franklin, Identity-based encryption from the Weil pairing, in CRYPTO 2001, ed. by J. Kilian. LNCS, vol. 2139 (Springer, New York, 2001), pp. 213-229
14. D. Boneh, C. Gentry, B. Lynn, H. Shacham, Aggregate and verifiably encrypted signatures from bilinear maps, in EUROCRYPT 2003, ed. by E. Biham. LNCS, vol. 2656 (Springer, New York, 2003), pp. 416-432
15. M. Burmester Y. Desmedt 1989 Remarks on soundness of proofs Electron. Lett. 25 22 1509 1511
16. J.C. Cha, J.H. Cheon, An identity-based signature from gap diffie-hellman groups, in PKC 2003, ed. by Y. Desmedt. LNCS, vol. 2567 (Springer, New York, 2003), pp. 18-30
17. J.H. Cheon, A universal forgery of Hess's second ID-based signature against the nown-message attack. Cryptology ePrint Archive, Report 2002/028, 2002. http://eprint.iacr.org/2002/028
18. J.-F. Dhem D. Veithen J.-J. Quisquater 1996 SCALPS: Smart card for limited payment systems IEEE Micro 16 3 42 51
19. Y. Dodis, J. Katz, S. Xu, M. Yung, Strong key-insulated signature schemes, in PKC 2003, ed. by Y. Desmedt. LNCS, vol. 2567 (Springer, New York, 2003), pp. 130-144
20. U. Feige A. Fiat A. Shamir 1988 Zero knowledge proofs of identity J. Cryptology 1 2 77 94
21. A. Fiat, A. Shamir, How to prove yourself: Practical solutions to identification and signature problems, in CRYPTO 1986, ed. by A. Odlyzko. LNCS, vol. 263 (Springer, New York, 1986), pp. 186-194
22. M. Fischlin, R. Fischlin, The representation problem based on factoring, in CT-RSA 2002, ed. by B. Preneel. LNCS, vol. 2271 (Springer, New York, 2002), pp. 96-113
23. D. Galindo, J. Herranz, E. Kiltz, On the generic construction of identity-based signatures with additional properties, in ASIACRYPT 2006, ed. by X. Lai, K. Chen. LNCS, vol. 4284 (Springer, New York, 2006), pp. 178-193
24. C. Gentry, A. Silverberg, Hierarchical ID-based cryptography, in ASIACRYPT 2002, ed. by Y. Zheng. LNCS, vol. 2501 (Springer, New York, 2002), pp. 548-566
25. M. Girault, An identity-based identification scheme based on discrete logarithms modulo a composite number, in EUROCRYPT 1990, ed. by I. Damgård. LNCS, vol. 473 (Springer, New York, 1990), pp. 481-486
26. S. Goldwasser S. Micali R. Rivest 1988 A digital signature scheme secure against adaptive chosen-message attacks SIAM J. Comput. 17 2 281 308
27. L.C. Guillou, J.-J. Quisquater, A "paradoxical" identity-based signature scheme resulting from zero-knowledge, in CRYPTO 1988, ed. by S. Goldwasser. LNCS, vol. 403 (Springer, New York, 1989), pp. 216-231
28. F. Hess, Efficient identity based signature schemes based on pairings, in Selected Areas in Cryptography, SAC 2002, ed. by K. Nyberg, H. Heys (Springer, New York, 2003), pp. 310-324
29. R. Impagliazzo, M. Luby, One-way functions are essential for complexity based cryptography, in Proc. of the 30th FOCS, Research Triangle Park, North Carolina, October 1989 (IEEE Computer Society Press, New York, 1989), pp. 230-235
30. K. Kurosawa, S.-H. Heng, From digital signature to ID-based identification/signature, in PKC 2004, ed. by F. Bao, R. Deng, J. Zhou. LNCS, vol. 2947 (Springer, New York, 2004), pp. 248-261
31. B. Libert, J.-J. Quisquater, The exact security of an identity based signature and its applications. Cryptology ePrint Archive, Report 2004/102, 2004. http://eprint.iacr.org/2004/102
32. A.J. Menezes, P.C. van Oorschot, S.A. Vanstone, Handbook of Applied Cryptography (CRC Press, New York, 1996)
33. K. Ohta, T. Okamoto, A modification of the Fiat-Shamir scheme, in CRYPTO 1988, ed. by S. Goldwasser. LNCS, vol. 403 (Springer, New York, 1990), pp. 232-243
34. K. Ohta, T. Okamoto, On concrete security treatment of signatures derived from identification, in CRYPTO 1998, ed. by H. Krawczyk. LNCS, vol. 1462 (Springer, New York, 1998), pp. 354-370
35. T. Okamoto, Provably secure and practical identification schemes and corresponding signature schemes, in CRYPTO 1992, ed. by E. Brickell. LNCS, vol. 740 (Springer, New York, 1993), pp. 31-53
36. H. Ong, C.-P. Schnorr, Fast signature generation with a Fiat-Shamir-like scheme, in EUROCRYPT 1990, ed. by I. Damgård. LNCS, vol. 473 (Springer, New York, 1990), pp. 432-440
37. K.G. Paterson, ID-based signatures from pairings on elliptic curves. Cryptology ePrint Archive, Report 2002/004, 2002. http://eprint.iacr.org/
38. D. Pointcheval J. Stern 2000 Security arguments for digital signatures and blind signatures J. Cryptol. 13 3 361 396
39. J. Rompel, One-way functions are necessary and sufficient for secure signatures, in Proc. of the 22nd ACM STOC, Baltimore, Maryland, May 14-16 1990 (ACM Press, New York, 1990), pp. 387-394
40. S. Saeednia, R. Safavi-Naini, On the security of Girault's identification scheme, in PKC 1998, ed. by H. Imai, Y. Zheng. LNCS, vol. 1431 (Springer, New York, 1998), pp. 149-153
41. R. Sakai, K. Ohgishi, M. Kasahara, Cryptosystems based on pairing, in SCIS 2000, Okinawa, Japan, January 2000
42. C.-P. Schnorr, Efficient identification and signatures for smartcards, in CRYPTO 1989, ed. by G. Brassard. LNCS, vol. 435 (Springer, New York, 1990), pp. 239-252
43. t -root identification and signatures, in CRYPTO 1996, ed. by N. Koblitz. LNCS, vol. 1109 (Springer, New York, 1996), pp. 143-156
44. A. Shamir, Identity-based cryptosystems and signature schemes, in CRYPTO 1984, ed. by G.R. Blakely, D. Chaum. LNCS, vol. 196 (Springer, New York, 1984), pp. 47-53
45. V. Shoup 1999 On the security of a practical identification scheme J. Cryptol. 12 4 247 260
46. J. Stern, D. Pointcheval, J. Malone-Lee, N.P. Smart, Flaws in applying proof methodologies to signature schemes, in CRYPTO 2002, ed. by M. Yung. LNCS, vol. 2442 (Springer, New York, 2002), pp. 93-110
47. H.C. Williams 1980 A modification of the RSA public-key encryption procedure IEEE Trans. Inf. Theory 26 6 726 729
48. X. Yi 2003 An identity-based signature scheme from the Weil pairing IEEE Commun. Lett. 7 2 76 78