Computing on Authenticated Data: New Privacy Definitions and Constructions - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Preprints, Working Papers, ... Year :

Computing on Authenticated Data: New Privacy Definitions and Constructions

Benoit Libert
Connectez-vous pour contacter l'auteur
Thomas Peters


Homomorphic signatures are primitives that allow for public computations on authenticated data. At TCC 2012, Ahn {\it et al.} defined a framework and security notions for such systems. For a predicate $P$, their notion of $P$-homomorphic signature makes it possible, given signatures on a message set $M$, to publicly derive a signature on any message $m'$ such that $P(M,m')=1$. Beyond unforgeability, Ahn {\it et al.} considered a strong notion of privacy -- called strong context hiding -- requiring that derived signatures be perfectly indistinguishable from signatures newly generated by the signer. In this paper, we first note that the definition of strong context hiding may not imply unlinkability properties that can be expected from homomorphic signatures in certain situations. We then suggest other definitions of privacy and discuss the relations among them. Our strongest definition, called {\it complete} context hiding security, is shown to imply previous ones. In the case of linearly homomorphic signatures, we only attain a slightly weaker level of privacy which is nevertheless stronger than in previous realizations in the standard model. For subset predicates, we prove that our strongest notion of privacy is satisfiable and describe a completely context hiding system with constant-size public keys. In the standard model, this construction is the first one that allows signing messages of arbitrary length. The scheme builds on techniques that are very different from those of Ahn {\it et al.}
Fichier principal
Vignette du fichier
hsig-full-version-AC.pdf (503.69 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-00730665 , version 1 (10-09-2012)
hal-00730665 , version 2 (15-09-2012)
hal-00730665 , version 3 (03-12-2012)
hal-00730665 , version 4 (27-12-2012)


  • HAL Id : hal-00730665 , version 4


Nuttapong Attrapadung, Benoit Libert, Thomas Peters. Computing on Authenticated Data: New Privacy Definitions and Constructions. 2012. ⟨hal-00730665v4⟩
216 View
544 Download


Gmail Facebook Twitter LinkedIn More