identity-based digital signature scheme without bilineadddd (19)

《identity-based digital signature scheme without bilineadddd (19)》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、FullyLeakage-ResilientSignaturesEletteBoyleGilSegevyDanielWichszMarch12,2011AbstractAsignatureschemeisfullyleakageresilient(KatzandVaikuntanathan,ASIACRYPT'09)ifitisexistentiallyunforgeableunderanadaptivechosen-messageattackeveninasettingwhereanadversarymayobtainbounded(yetarbitrary)leakagei

2、nformationonallintermediatevaluesthatareusedthroughoutthelifetimeofthesystem.Thisisastrongandmeaningfulnotionofsecuritythatcapturesawiderangeofside-channelattacks.Oneofthemainchallengesinconstructingfullyleakage-resilientsignatureschemesisdeal-ingwithleakagethatmaydependontherandombitsusedbyt

3、hesigningalgorithm,andconstructionsofsuchschemesareknownonlyintherandom-oraclemodel.Moreover,evenintherandom-oraclemodel,knownschemesareonlyresilienttoleakageoflessthanhalfthelengthoftheirsigningkey.Inthispaperweconstructtherstfullyleakage-resilientsignatureschemeswithoutrandomoracles.Wepres

4、entaschemethatisresilienttoanyleakageoflength(1o(1))Lbits,whereListhelengthofthesigningkey.Ourapproachreliesongenericcryptographicprimitives,andatthesametimeadmitsratherecientinstantiationsbasedonspecicnumber-theoreticassumptions.Inaddition,weshowthatourapproachextendstothecontinual-leakag

5、emodel,recentlyintroducedbyDodis,Haralambiev,Lopez-AltandWichs(FOCS'10),andbyBrakerski,TaumanKalai,KatzandVaikuntanathan(FOCS'10).Inthismodelthesigningkeyisallowedtoberefreshed,whileitscorrespondingvericationkeyremainsxed,andtheamountofleakageisassumedtobeboundedonlyinbetweenanytwosuccessiv

6、ekeyrefreshes.DepartmentofMathematics,MassachusettsInstituteofTechnology,Cambridge,MA02139,USA.Email:eboyle@mit.edu.ResearchsupportedbytheUSNationalDefenseScienceandEngineeringGraduateFellowship.ThisworkwaspartiallycompletedwhilevisitingtheWeizmannInstituteofScience.yMicrosoftResearch,Mounta

7、inView,CA94043,USA.Email:gil.segev@microsoft.com.ThisworkwaspartiallycompletedwhiletheauthorwasaPh.D.studentattheWeizmannInstituteofScience,andsupportedbytheAdamsFellowshipProgramoftheIsraelAcademyofSciencesandHumanities.zDepartmentofComputer