A Lattice-Based Group Signature Scheme with Message-Dependent Opening

Abstract : Group signatures are an important anonymity primitive allowing users to sign messages while hiding in a crowd. At the same time, signers remain accountable since an authority is capable of de-anonymizing signatures via a process called opening. In many situations, this authority is granted too much power as it can identify the author of any signature. Sakai et al. proposed a flavor of the primitive, called Group Signature with Message-Dependent Opening (GS-MDO), where opening operations are only possible when a separate authority (called " admitter ") has revealed a trapdoor for the corresponding message. So far, all existing GS-MDO constructions rely on bilinear maps, partially because the message-dependent opening functionality inherently implies identity-based encryption. This paper proposes the first GS-MDO candidate based on lattice assumptions. Our construction combines the group signature of Ling, Nguyen and Wang (PKC'15) with two layers of identity-based encryption. These components are tied together using suitable zero-knowledge argument systems.
Document type :
Conference papers
Liste complète des métadonnées

Cited literature [41 references]  Display  Hide  Download

https://hal.inria.fr/hal-01302790
Contributor : Benoit Libert <>
Submitted on : Friday, April 15, 2016 - 9:31:51 AM
Last modification on : Saturday, March 16, 2019 - 5:10:08 PM
Document(s) archivé(s) le : Saturday, July 16, 2016 - 11:00:13 AM

File

gs-mdo.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : hal-01302790, version 1

Collections

Citation

Benoît Libert, Fabrice Mouhartem, Khoa Nguyen. A Lattice-Based Group Signature Scheme with Message-Dependent Opening. 14th International Conference on Applied Cryptography and Network Security (ACNS 2016), Jun 2016, Guildford, United Kingdom. ⟨hal-01302790⟩

Share

Metrics

Record views

453

Files downloads

809