Efficient verifiable encryption (and fair exchange) of digital signatures

Giuseppe Ateniese
1999 Proceedings of the 6th ACM conference on Computer and communications security - CCS '99  
A fair exchange protocol allows two users to exchange items so that either each user gets the other's item or neither user does. In [2], versfiable eneryptionis introduced as a primitive that can be used to build extremely efficient fair exchange protocols where the items exchanged represent digital signatures. Such protocols may be used to digitally sign contracts. This paper presents new simple schemes for verifiable encryption of digital signatures. We make use of a trusted third party (TTP)
more » ... but in an optsmist:c sense, i.e., the TTP takes part in the protocol only if one user cheats or simply crashes. The performance of our schemes significantly surpasses that of prior art.
doi:10.1145/319709.319728 dblp:conf/ccs/Ateniese99 fatcat:zr4omvpqz5c4hgwiw3b5wup5xy