Extended Security Arguments for Signature Schemes
Résumé
The well-known forking lemma by Pointcheval and Stern has been used to prove the security of the so-called generic signature schemes. These signature schemes are obtained via the Fiat-Shamir transform from three-pass identification schemes. A number of five-pass identifi- cation protocols have been proposed in the last few years. Extending the forking lemma and the Fiat-Shamir transform would allow to ob- tain new signature schemes since, unfortunately, these newly proposed schemes fall outside the original framework. In this paper, we provide an extension of the forking lemma in order to assess the security of what we call n-generic signature schemes. These include signature schemes that are derived from certain (2n + 1)-pass identification schemes. We thus obtain a generic methodology for proving the security of a number of signature schemes derived from recently published five-pass identifica- tion protocols, and potentially for (2n + 1)-pass identification schemes to come.
Domaines
Cryptographie et sécurité [cs.CR]Origine | Fichiers éditeurs autorisés sur une archive ouverte |
---|
Loading...