qDSA: Small and Secure Digital Signatures with Curve-based Diffie–Hellman Key Pairs

Abstract : qDSA is a high-speed, high-security signature scheme that facilitates implementations with a very small memory footprint, a crucial requirement for embedded systems and IoT devices, and that uses the same public keys as modern Diffie–Hellman schemes based on Montgomery curves (such as Curve25519) or Kummer surfaces. qDSA resembles an adaptation of EdDSA to the world of Kummer varieties, which are quotients of algebraic groups by ±1. Interestingly, qDSA does not require any full group operations or point recovery: all computations , including signature verification, occur on the quotient where there is no group law. We include details on four implementations of qDSA, using Montgomery and fast Kummer surface arithmetic on the 8-bit AVR ATmega and 32-bit ARM Cortex M0 platforms. We find that qDSA significantly outperforms state-of-the-art signature implementations in terms of stack usage and code size. We also include an efficient compression algorithm for points on fast Kummer surfaces, reducing them to the same size as compressed elliptic curve points for the same security level.
Document type :
Conference papers
Liste complète des métadonnées

Cited literature [41 references]  Display  Hide  Download

https://hal.inria.fr/hal-01585322
Contributor : Benjamin Smith <>
Submitted on : Monday, September 11, 2017 - 2:56:56 PM
Last modification on : Wednesday, March 27, 2019 - 4:41:28 PM

Files

xkummer.pdf
Files produced by the author(s)

Licence


Copyright

Identifiers

  • HAL Id : hal-01585322, version 1
  • ARXIV : 1709.03358

Citation

Joost Renes, Benjamin Smith. qDSA: Small and Secure Digital Signatures with Curve-based Diffie–Hellman Key Pairs. ASIACRYPT 2017, IACR, Dec 2017, Hong Kong, China. ⟨hal-01585322⟩

Share

Metrics

Record views

432

Files downloads

128