Sciweavers

Share
CTRSA
2007
Springer

A Practical and Tightly Secure Signature Scheme Without Hash Function

10 years 7 months ago
A Practical and Tightly Secure Signature Scheme Without Hash Function
In 1999, two signature schemes based on the flexible RSA problem (a.k.a. strong RSA problem) were independently introduced: the Gennaro-Halevi-Rabin (GHR) signature scheme and the Cramer-Shoup (CS) signature scheme. Remarkably, these schemes meet the highest security notion in the standard model. They however differ in their implementation. The CS scheme and its subsequent variants and extensions proposed so far feature a loose security reduction, which, in turn, implies larger security parameters. The security of the GHR scheme and of its twinning-based variant are shown to be tightly based on the flexible RSA problem but additionally (i) either assumes the existence of division-intractable hash functions, or (ii) requires an injective mapping into the prime numbers in both the signing and verification algorithms. In this paper, we revisit the GHR signature scheme and completely remove the extra assumption made on the hash functions without relying on injective prime mappings. As ...
Benoît Chevallier-Mames, Marc Joye
Added 07 Jun 2010
Updated 07 Jun 2010
Type Conference
Year 2007
Where CTRSA
Authors Benoît Chevallier-Mames, Marc Joye
Comments (0)
books