Comment on “An efficient identity-based signature scheme with provable security”

A novel ID-based proxy-protected signature scheme based on identity information is presented in this paper. We review the concept ID-Based signature introduced by Shamir, define the security notion of an ID-Based signature. We also improve the Shamir’s ID-Based signature and prove its security under the proposed security notion. From the improved Shamir’s ID-Based signature scheme we construct an ID-Based proxy signature scheme, the security is based on the underlying ID-based signature scheme. Our scheme is efficient and easy to implement. The scheme simplifies the public key as the user’s id and can be easily applied to all the RSA-type cryptosystems.

An efficient identity-based signature scheme without bilinear pairing for vehicle-to-vehicle communication in VANETs

Recently, Tsai et al. constructed an efficient identity-based signature (IBS) scheme and claimed that it was strongly unforgeable in the standard model. Unfortunately, we find that their scheme is insecure. By giving concrete attack, we show that their scheme does not meet the requirement of strong unforgeability. Meanwhile, we demonstrate that there are serious flaws in their security proof. The simulator cannot correctly answer the signing query in the security model. Furthermore, we propose an improved strongly unforgeable IBS scheme without random oracles. Compared with other strongly unforgeable IBS schemes in the standard model, our scheme is more efficient in terms of computation cost and signature size.

Post-quantum secure identity-based signature achieving forward secrecy

Recently, Tseng et al. proposed a new notion for identity-based signature (IBS) scheme to resist ephemeral secret leakage (ESL) attacks, called leakage-free identity-based signature (leakage-free IBS), and devised the first secure leakage-free IBS scheme. However, they only considered the situation of the leakage of ephemeral secrets used for generating the signatures. Notice that the private key extraction procedure is probabilistic as well in their scheme, that is, there are ephemeral secrets used by the key generation center to generate the signers’ private keys. It is practical to consider that if the adversary comprises these ephemeral secrets, then he can reveal the master key of the system. Therefore, it is desired to introduce a new security notion for the leakage-free IBS schemes to consider the ESL attacks on both private key extraction and signing procedures. In this paper, we present such security notion. Moreover, we propose two IBS schemes that are proved to be secure under the new security notion.

Identity-based signature (IBS) which is a paradigm built on public key cryptography has played a significant role in light-weight authentication. With the advent of the post quantum era, the lattice has become a main mathematical tool to construct quantum-immune cryptographic schemes. By utilizing an admissible hash function with compatible algorithms and lattice trapdoors as basic building blocks, we propose a new IBS scheme over lattices. The scheme is proved existentially unforgeable against adaptive identity attacks and chosen message attacks in the standard model under inhomogeneous short integer solution assumption via the generalized partitioning proof technique. Moreover, the scheme needs only logarithmic basic matrices as master public key while keeping the same private key size and signature size as those of other standard model lattice-based IBS schemes. This construction is the first adaptive-ID secure standard model IBS scheme over lattice with such space efficiency.

In this paper, we first propose an efficient provably secure identity-based signature (IBS) scheme based on bilinear pairings, then propose an efficient identity-based blind signature (IBBS) scheme based on our IBS scheme. Assuming the intractability of the Computational Diffie-Hellman Problem, our IBS scheme is unforgeable under adaptive chosen-message and ID attack. Efficiency analyses show that our schemes can offer advantages in runtime over the schemes available. Furthermore, we show that, contrary to the authors claimed, Zhang and Kim’s scheme in ACISP 2003 is one-more forgeable, if the ROS-problem is solvable.

Recently, the notion of the key-insulated public- key system has been suggested to protect the security of users' private keys. A general idea of this system is changing the user's private key along with the time, but the user's public key remains unchanged. In this paper, we propose a new identity (ID)-based key-insulated signature scheme from bilinear pairings. As compared with the recently proposed ID-based key-insulated signature schemes, our proposed scheme has better performance in the batch verifying phase. For security analysis, our scheme is a provably secure key-insulated signature scheme in the random oracle model and under the computational Diffie-Hellman assumption. Meanwhile, to demonstrate the additional advantage of a key-insulated signature, we present a novel application based on the proposed scheme, called full delegation ID-based proxy signature scheme with time restriction. To our best knowledge, no such a proxy signature scheme is proposed until now.

Identity-based proxy signature (IDBPSE) has attracted many researchers and scholars since it can simplify key management procedure of certificate-based public key setting. Recently, some IDBPSE schemes are constructed in the standard model. However, most of them have very loose security reductions. And they cannot resist the attack from the delegator and have low computational efficiency. In this study, a novel and efficient IDBPSE scheme is constructed, and we also prove its security based on the computational Diffie–Hellman assumption. Compared with other existing IDBPSE schemes, our scheme has two main advantages: tight security reduction and more complete security including resisting the delegator attack. And our scheme has more efficient performance including less computational cost and shorter signature size than most of existing similar IDBPSE schemes. What is more, our scheme does not require secure channels to transfer delegation keys, but other identity-based proxy signature schemes need.

An efficient provably secure identity-based blind signature (IBBS) scheme based on bilinear pairings is proposed. Assuming the intractability of the q-Strong Diffie-Hellman problem, our IBBS is unforgeable under adaptive chosen-message and ID attack. Because of avoiding using the inefficient MapToPoint function, our IBBS can offer advantages in runtime over the schemes available. Based on this ID-based blind signature scheme, we describe the first ID-based threshold blind signature (TBS) and show that it has security properties of unforgeability and robustness.

This paper proposes a new identity-based signature scheme. The new scheme is proven to be existentially unforgeable against Chosen-Principle and Chosen-Message CP-CM attackers who are the strongest attackers so far defined for identity-based signatures. The security of our scheme relies on the standard Computational Diffie-Hellman CDH assumption. The proof is given in the random oracle model where a hash function is modelled as random oracle. Analysis shows that our scheme is also more efficient than the state of the art in terms of computation and communication. We finally improve the basic scheme by eliminating the single-point problem, allow using as a proxy signature scheme and enable fast verification in multi-user settings. The basic scheme and its extensions show that our proposal is versatile to realise efficient and secure authentication in various scenarios.

Authentication and authorization are crucial for ensuring the security of information systems. Role-based access control (RBAC) can act as an efficient method of managing authorization of system resources. In this paper, we apply identity-based signature (IBS) technique to cryptographically provide user authentication and role-based authorization. To achieve this, we first extend the RBAC model to incorporate identity-based cryptography. Our access control architecture is derived from an identity-based signature scheme on bilinear pairings and eliminates the use of digital certificates. In our suggestion, the manager checks the validity of a user's identity and user's activated roles simultaneously by verifying a corresponding signature, thus the user authentication and role-based authorization procedures can be combined into one operation. We also prove the security of the proposed scheme in the random oracle model.

Efficient identity-based RSA multisignatures

Efficient forward secure identity-based shorter signature from lattice

We present a quantumly secure identity-based signature scheme based on the standard short integer solution problem, featuring tight security reductions in the quantum and classic random oracle models. The scheme has short signatures. Each signature contains a single lattice vector plus a single bit. Compared to the existing tightly secure, short lattice identity-based signature schemes by Pan and Wagner (PQCrypto’21), our scheme has a shorter signature size (around 30% shorter), stronger unforgeability, relies on a weaker assumption, and has detailed proof in the quantum random oracle model.