Designated Verifier Signature Scheme Research Articles

Efficient attribute-based strong designated verifier signature scheme based on elliptic curve cryptography.

In an attribute-based strong designated verifier signature, a signer who satisfies the access structure signs the message and assigns it to a verifier who satisfies the access structure to verify it, which enables fine-grained access control for signers and verifiers. Such signatures are used in scenarios where the identity of the signer needs to be protected, or where the public verifiability of the signature is avoided and only the designated recipient can verify the validity of the signature. To address the problem that the overall overhead of the traditional attribute-based strong designated verifier signature scheme is relatively large, an efficient attribute-based strong designated verifier signature scheme based on elliptic curve cryptography is proposed, as well as a security analysis of the new scheme given in the standard model under the difficulty of the elliptic curve discrete logarithm problem (ECDLP). On the one hand, the proposed scheme is based on elliptic curve cryptography and uses scalar multiplication on elliptic curves, which is computationally lighter, instead of bilinear pairing, which has a higher computational overhead in traditional attribute-based signature schemes. This reduces the computational overhead of signing and verification in the system, improves the efficiency of the system, and makes the scheme more suitable for resource-constrained cloud end-user scenarios. On the other hand, the proposed scheme uses LSSS (Linear Secret Sharing Schemes) access structure with stronger access policy expression, which is more efficient than the "And" gate or access tree access structure, making the computational efficiency of the proposed scheme meet the needs of resource-constrained cloud end-users.

Semi- quantum Designated Verifier Signature Scheme

Semi- quantum Designated Verifier Signature Scheme

Quantum Designated Verifier Signature Scheme with Semi-Trusted Third-Party

Quantum Designated Verifier Signature Scheme with Semi-Trusted Third-Party

A Hash-Based Quantum-Resistant Designated Verifier Signature Scheme

Digital signatures are unsuitable for specific applications that are sensitive on a personal or commercial level because they are universally verifiable. Jakobsson et al. proposed the Designated Verifier Signature (DVS) system, which only allows the intended verifier to validate a message’s signature. It prohibits the disclosure of a conviction to a third party. This functionality is useful in applications that require both authenticity and signer privacy, such as electronic voting and tender calls. The vast majority of current DVS schemes are based on difficult number theory problems such as integer factorization or discrete log problems over various groups. The development of a large-scale quantum computer would render these schemes unsafe. As a result, it is critical to develop quantum-resistant DVS methods. In both quantum and classical computers, signatures based on one-way functions are more efficient and secure. They have several advantages over digital signatures based on trapdoor functions. As a result, hash-based signatures are now considered viable alternatives to number-theoretic signatures. Existing hash-based signatures, on the other hand, are easily verifiable by anyone. As a result, they do not protect the signer’s identity. In addition, they are one-time signatures. This paper presents a hash-based multi-time designated verifier signature scheme that ensures signer anonymity. The unforgeability of the signature scheme is also tested in the random oracle model under chosen message attack. The properties such as non-transferability and non-delegatability are investigated.

Comments On The Cryptanalysis Of An Identity-Based Strong Designated Verifier Signature Scheme

In this paper, we explain that the proposed modification to an identity-based strong designated verifier signature scheme (Lecture Notes in Electrical Engineering, vol. 164, no. 1, Springer-Verlag, 2012) is not secure. This scheme has a short signature size, low communication cost, and low computational cost. But, it does not satisfy the required authentication property in a designated verifier signature scheme. In particular, we introduce an attack that enables anybody to verify the signature.

A practical quantum designated verifier signature scheme for E-voting applications

A practical quantum designated verifier signature scheme for E-voting applications

Secure and efficient quantum designated verifier signature scheme

A digital signature with designated verifier (SWDV) makes that only the designated verifier can verify its validity. It can be used to protect the privacy and economic interest of the signer. So, the SWDV schemes have many applications in e-voting, auction and some other fields. To make the SWDV secure against the quantum forger, a quantum signature with designated verifier signature (QSWDV) scheme is proposed. Our QSWDV is robust due to its strong security against forgery attack, inter-resending attacks, impersonation attacks and Trojan horse attacks. Its properties such as non-transferability and hiding source can be guaranteed by the signature simulation of the designated verifier. What is more, our scheme can be proved to be information-theoretically secure, which can guarantee the secrecy of the signer’s private key and the unforgeability of the QSWDV. In the proposed QSWDV scheme, the partners neither need use quantum one-way function nor need perform quantum state comparisons, which can reduce the complexity and improve the efficiency the QSWDV scheme.

A New Approach to Keep the Privacy Information of the Signer in a Digital Signature Scheme

In modern applications, such as Electronic Voting, e-Health, e-Cash, there is a need that the validity of a signature should be verified by only one responsible person. This is opposite to the traditional digital signature scheme where anybody can verify a signature. There have been several solutions for this problem, the first one is we combine a signature scheme with an encryption scheme; the second one is to use the group signature; and the last one is to use the strong designated verifier signature scheme with the undeniable property. In this paper, we extend the traditional digital signature scheme to propose a new solution for the aforementioned problem. Our extension is in the sense that only a designated verifier (responsible person) can verify a signer’s signature, and if necessary (in case the signer refuses to admit his/her signature) the designated verifier without revealing his/her secret key is able to prove to anybody that the signer has actually generated the signature. The comparison between our proposed solution and the three existing solutions shows that our proposed solution is the best one in terms of both security and efficiency.

Identity-Based Quantum Designated Verifier Signature

Designated verifier signatures are very useful in the applications such as e-voting and auction. In this paper, an identity-based quantum designated verifier signature (IDQDVS) scheme is proposed. It has the security properties such as designated verification, non-transferability and hiding source. And it is secure against forgery attack, inter-resending attack and impersonation attack. What is more, our scheme has the advantages of the classical designated verifier signature schemes. In our scheme, the signer signs a message with his/her private key, while the designated verifier verifies the corresponding IDQDVS with the signer’s classical identity information (such as his/her name or email address), which is used as the signer’s public key. Hence, our scheme can simplify the key management of the quantum signature system. On the other hand, our scheme does not need any entangled state. The verifier need not perform any quantum state comparison during the signature verification phase. Therefore, our scheme is more practicable and efficient than the similar schemes.

Quantum signature for designated verifier with strong security

Most of the classical designated verifier signature schemes are insecure against quantum adversary. In this paper, a quantum signature scheme for the designated verifier is proposed. In our scheme, during the initialization phase, the partners share secret keys by performing the quantum key distribution protocol. On the other hand, by performing the quantum direct communication protocol, the key generator center shares secret keys with the signer and the designated verifier, respectively. The key generator center generates a particle sequence of Bell state and distributes the particles between the signer and the designated verifier. During the signature generation phase, the signer encrypts the particle sequence by the secret keys and Hardmard operators. After that, the signer performs the controlled unitary operations on the encrypted particle sequence so as to generate the quantum signature. The designated verifier can simulate the quantum signature by performing the same symmetric signing steps as that performed by the original signer. Hence, the quantum signature signed by the true signer is the same as the one simulated by the receiver, which makes our scheme possess the designated properties. During the signature verification phase, the designated verifier performs the controlled unitary operations on the quantum signature and obtains the quantum ciphertexts. After that, the designated verifier decrypts the quantum ciphertexts by the symmetric secret keys and Hardmard operators so that the quantum signature can be verified. Our signature is secure against forgery attack, inter-resending attacks and Trojan horse attack. Because the trace distance between the density operators of different quantum signatures is zero, the information-theoretical security of our quantum signature scheme can be proved. The unconditionally secure quantum key distribution protocol and the one-time pad encryption algorithm can guarantee the security of the secret keys shared by the partners. What is more, the security assumption about the key generation center is weak. That is, it is not necessary to assume that the key generation center should be fully trusted. On the other hand, in our scheme, the quantum one-way function is not used. To generate a quantum signature, the signer need not prepare for entangled particle sequence. To verify a quantum signature, the verifier need not apply any state comparison to the received particles. The qubit efficiency is 100%. Therefore, our scheme has the advantages in the security and efficiency over the other quantum signature schemes for the designated verifier.

Aggregatable Certificateless Designated Verifier Signature

In recent years, the Internet of Things (IoT) devices have become increasingly deployed in many industries and generated a large amount of data that needs to be processed in a timely and efficient manner. Using aggregate signatures, it provides a secure and efficient way to handle large numbers of digital signatures with the same message. Recently, the privacy issue has been concerned about the topic of data sharing on the cloud. To provide the integrity, authenticity, authority, and privacy on the data sharing in the cloud storage, the notion of an aggregatable certificateless designated verifier signature scheme (ACLDVS) was proposed. ACLDVS also is a perfect tool to enable efficient privacy-preserving authentication systems for IoT and or the vehicular ad hoc networks (VANET). Our concrete scheme was proved to be secured underling of the Computational Diffie-Hellman assumption. Compared to other related schemes, our scheme is efficient, and the signature size is considerably short.

A scheme on converting quantum deniable authentication into universal quantum designated verifier signature

The deniable authentication and designated verifier signature protocol can achieve the property of deniability by a transcript simulation algorithm, so two protocols are similar in the concepts and application scenarios. In this paper, we will avoid the research ideas of classical cryptography and research how to convert quantum deniable authentication protocol into quantum designated verifier signature in this universal case that the owner of the signature and the signer isn’t the same user in quantum designated verifier signature scheme such as electronic ID cards and e-passports. A mode on converting quantum deniable authentication into quantum designated verifier signature is firstly proposed by introducing quantum signature with public verifiability, including the entities and the implementation process converting, and then a real quantum designated verifier signature scheme is proposed, which satisfies all security requirements of a designated verifier signature scheme and can withstand intercept-resend attack and impersonation attack and entangle-measure attack.

Strong Designated Verifier Signature Scheme with Undeniability and Strong Unforgeability in the Standard Model

Strong designated verifier signature can provide an efficient way to protect the identity privacy of the signer and the integrity of the data transmitted over the public channel. These characteristics make it very useful in outsourcing computing, electronic voting, electronic bidding, electronic auction and other fields. However, most strong designated verifier signature schemes are unable to identify the real signature generator when the signer and the designated verifier dispute a signature. In addition, the existing strong designated verifier signature schemes in the standard model rarely satisfy strong unforgeability, and thus cannot prevent the attacker from forging a valid signature on any previously signed message. Therefore, designing a strong designated verifier signature scheme without random oracles that satisfies strong unforgeability and undeniability is very attractive in both practice and theory. Motivated by these concerns, we design the first undeniable strong designated verifier signature scheme without random oracles, in which the arbiter can independently perform the judgment procedure to prove whether a controversial signature is generated by the signer or the designated verifier. Under standard assumptions, the scheme is proved to be strongly unforgeable in standard model. Furthermore, it not only achieves non-transferability and privacy of the signer’s identity but also satisfies the undeniable property of traditional digital signature schemes. Performance analysis results show that the length of the signer’s private key, the designated verifier’s private key and signature length are 40 bits, 40 bits and 384 bits, respectively. Compared with he related schemes, the proposed scheme has higher performance in signature length, private key size and computational overhead. Finally, we show how to apply it to implement outsourcing computation in cloud computing.

Certificateless designated verifier signature revisited: achieving a concrete scheme in the standard model

In a designated verifier signature (DVS) scheme, the signer (Alice) creates a signature which is only verifiable by a designated verifier (Bob). Furthermore, Bob cannot convince any third party that the signature was produced by Alice. A DVS scheme is applicable in scenarios where Alice must be authenticated to Bob without disturbing her privacy. The de-facto construction of DVS scheme is achieved in a traditional public key infrastructure (PKI) setting, which unfortunately requires a high-cost certificate management. A variant of identity-based (ID-based) setting DVS eliminates the need of certificates, but it introduces a new inherent key escrow problem, which makes it impractical. Certificateless public key cryptography (CL-PKC) is empowered to overcome the problems of PKI and ID-based settings, where it does not suffer from any of the aforementioned problems. However, only a few number of certificateless DVS (CL-DVS) schemes have been proposed in the literature to date. Moreover, all existing CL-DVS schemes are only proven secure in the random oracle model, while some of them are already known to be insecure. We provide three contributions in this paper. First, we revisit the security proofs of existing CL-DVS schemes in the literature and show that unfortunately there are some drawbacks in the proofs of all of those schemes. Second, we concentrate on the recently proposed CL-DVS scheme (IEEE Access 2018) and show a drawback in its security proof which makes it unreliable. Furthermore, we show that this scheme is delegatable in contrast to the author’s claim. Finally, we propose a CL-DVS scheme and prove its security requirements in the standard model. Our scheme is not only the first scheme with a complete and correct security proofs, but also the only scheme in the standard model.

A Certificateless Verifiable Strong Designated Verifier Signature Scheme

Certificateless strong designated verifier signature schemes have realized the merit of CL-PKC against the traditional strong designated verifier signatures. However, when the signer and the designated verifier disagree with the signature, existing schemes cannot distinguish the original signature from the signature transcript. In addition, errors or malicious actions introduced by the designated verifier may lead to the failure of signature verification. To solve these issues, we propose a certificateless verifiable strong designated verifier signature scheme. When disputes arise between the signer and the verifier, the scheme can effectively prevent the signer from denying the signature generated by the signer, as well as the designated verifier from denying valid signatures or invalid ones. Our scheme does not rely on bilinear pairings. The proposed scheme satisfies the requirements of verifiability, unforgeability, non-delegability, non-transferability and signer ambiguity. We also provide formal security proof in the random oracle model for the proposed scheme.

Universal designated verifier signature scheme with non-delegatability in the standard model

The notion of a Designated Verifier Signature (DVS) scheme allows a signer to create a signature which is only verifiable by an intended verifier. DVS is a very useful scheme for authenticating a signer without interfering with her privacy. In 2003, Steinfeld et al. extended this notion to enable a Universal Designated Verifier Signature (UDVS) scheme. In UDVS, everyone who holds Alice’s traditional signature on a message (the signature holder), can transform it into a DVS for a specific verifier. Non-delegatability is a critical property of a DVS scheme in applications where responsibility of a signer is important and can not be delegated to another entity. Shim (Information Science, 2014) posed an open problem on how to construct a non-delegatable UDVS scheme. Since then, it has been well acknowledged that constructing a UDVS scheme which is non-delegatable remains as an elusive research problem. Furthermore, gaining a construction which is based on the standard model (without random oracles) is most desirable in practice. In this work, we present an affirmative answer to the aforementioned open research problem. We present the first non-delegatable UDVS scheme and prove its security requirements in the standard model. To the best of our knowledge, our work is the first non-delegatable UDVS scheme, which fills the gap in the existing literature. Furthermore, when the signer is considered as the signature holder, our scheme is also considered as the first non-delegatable DVS scheme in the standard model.

An improved strong designated verifier signature scheme

Strong designated verifier signature is a special digital signature in which a signature can only be verified by the designated verifier. As more and more mobile devices have been used in the scena...

Efficient and Provably-secure Certificateless Strong Designated Verifier Signature Scheme without Pairings

Efficient and Provably-secure Certificateless Strong Designated Verifier Signature Scheme without Pairings

A new code‐based designated verifier signature scheme

SummaryDesignated verifier signature (DVS) scheme allows the verifier to verify the signature of a message but prevents from transferring the conviction to any third party. This scheme is useful in circumstances where authenticity, signer ambiguity, and signer's privacy are simultaneously needed in various applications such as electronic voting, call for tenders, etc. Most of the existing DVS schemes are based on the hard problems in number theory such as integer factorization or the discrete log problem. The construction of a large‐scale quantum computer would break those schemes. So, the National Institute of Standards and Technology Internal Report recommends to develop cryptographic systems that are secure against both the quantum and the classical computers. One such promising alternative to number theoretic cryptography is code‐based cryptography. This paper analyzes the code‐based strong designated verifier schemes proposed in 2016 by Ren et al and Koochak Shooshtari et al and shows that these schemes do not have non‐transferability which is the essential feature of a DVS scheme. Further, the paper proposed a DVS scheme built on syndrome decoding, a hard problem in coding theory, and proves its security properties such as unforgeability and non‐transferability in the random oracle model.

New DoS Defense Method Based on Strong Designated Verifier Signatures.

We present a novel technique for source authentication of a packet stream in a network, which intends to give guarantees that a specific network flow really comes from a claimed origin. This mechanism, named packet level authentication (PLA), can be an essential tool for addressing Denial of Service (DoS) attacks. Based on designated verifier signature schemes, our proposal is an appropriate and unprecedented solution applying digital signatures for DoS prevention. Our scheme does not rely on an expensive public-key infrastructure and makes use of light cryptography machinery that is suitable in the context of the Internet of Things (IoT). We analyze our proposed scheme as a defense measure considering known DoS attacks and present a formal proof of its resilience face to eventual adversaries. Furthermore, we compare our solution to already existent strategies, highlighting its advantages and drawbacks.