From Identification to Signatures, Tightly: A Framework and Generic Transforms [chapter]

Mihir Bellare, Bertram Poettering, Douglas Stebila
2016 Lecture Notes in Computer Science  
This paper provides a framework to treat the problem of building signature schemes from identification schemes in a unified and systematic way. The outcomes are (1) Alternatives to the Fiat-Shamir transform that, applied to trapdoor identification schemes, yield signature schemes with tight security reductions to standard assumptions (2) An understanding and characterization of existing transforms in the literature. One of our transforms has the added advantage of producing signatures shorter
more » ... an produced by the Fiat-Shamir transform. Reduction tightness is important because it allows the implemented scheme to use small parameters (thereby being as efficient as possible) while retaining provable security.
doi:10.1007/978-3-662-53890-6_15 fatcat:o47tc6xsrre6te7gb7j3ncj7am