Efficient anonymous credentials are typically constructed by combining proof-friendly signature schemes with compatible zero-knowledge proof systems. Inspired by pairing-based proof-friendly signatures such as Boneh- Boyen (BB) and Boneh-Boyen-Shacham (BBS), we propose a wide family of lattice-based proof-friendly signatures based on variants of the vanishing short integer solution (vSIS) assumption [Cini-Lai-Malavolta, Crypto’23]. In particular, we obtain natural lattice-based adaptions of BB and BBS which, similar to their pairing-based counterparts, admit nice algebraic properties. [Bootle-Lyubashevsky-Nguyen-Sorniotti, Crypto’23] (BLNS) recently proposed a framework for constructing lattice-based proof-friendly signatures and anonymous credentials, based on another new lattice assumption called \(\textsf{ISIS}_f\) parametrised by a fixed function f, with focus on f being the binary decomposition. We introduce a generalised \(\textsf{ISIS}_f\) framework, called \(\textsf{GenISIS}_f\) , with a keyed and probabilistic function f. For example, picking \(f_b(\mu ) = 1/(b-\mu )\) with key b for short ring element \(\mu \) leads to algebraic and thus proof-friendly signatures. To better gauge the robustness and proof-friendliness of \(\mathsf {(Gen)}\textsf{ISIS}_f\) , we consider what happens when the inputs to f are chosen selectively (or even adaptively) by the adversary, and the behaviour under relaxed norm checks. While bit decomposition quickly becomes insecure, our proposed function families seem robust.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Lattice-Based Proof-Friendly Signatures from Vanishing Short Integer Solutions

  • Adrien Dubois,
  • Michael Klooß,
  • Russell W. F. Lai,
  • Ivy K. Y. Woo

摘要

Efficient anonymous credentials are typically constructed by combining proof-friendly signature schemes with compatible zero-knowledge proof systems. Inspired by pairing-based proof-friendly signatures such as Boneh- Boyen (BB) and Boneh-Boyen-Shacham (BBS), we propose a wide family of lattice-based proof-friendly signatures based on variants of the vanishing short integer solution (vSIS) assumption [Cini-Lai-Malavolta, Crypto’23]. In particular, we obtain natural lattice-based adaptions of BB and BBS which, similar to their pairing-based counterparts, admit nice algebraic properties. [Bootle-Lyubashevsky-Nguyen-Sorniotti, Crypto’23] (BLNS) recently proposed a framework for constructing lattice-based proof-friendly signatures and anonymous credentials, based on another new lattice assumption called \(\textsf{ISIS}_f\) parametrised by a fixed function f, with focus on f being the binary decomposition. We introduce a generalised \(\textsf{ISIS}_f\) framework, called \(\textsf{GenISIS}_f\) , with a keyed and probabilistic function f. For example, picking \(f_b(\mu ) = 1/(b-\mu )\) with key b for short ring element \(\mu \) leads to algebraic and thus proof-friendly signatures. To better gauge the robustness and proof-friendliness of \(\mathsf {(Gen)}\textsf{ISIS}_f\) , we consider what happens when the inputs to f are chosen selectively (or even adaptively) by the adversary, and the behaviour under relaxed norm checks. While bit decomposition quickly becomes insecure, our proposed function families seem robust.