A Lattice-Based Group Signature Scheme with Message-Dependent Opening - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2016

A Lattice-Based Group Signature Scheme with Message-Dependent Opening


Group signatures are an important anonymity primitive allowing users to sign messages while hiding in a crowd. At the same time, signers remain accountable since an authority is capable of de-anonymizing signatures via a process called opening. In many situations, this authority is granted too much power as it can identify the author of any signature. Sakai et al. proposed a flavor of the primitive, called Group Signature with Message-Dependent Opening (GS-MDO), where opening operations are only possible when a separate authority (called " admitter ") has revealed a trapdoor for the corresponding message. So far, all existing GS-MDO constructions rely on bilinear maps, partially because the message-dependent opening functionality inherently implies identity-based encryption. This paper proposes the first GS-MDO candidate based on lattice assumptions. Our construction combines the group signature of Ling, Nguyen and Wang (PKC'15) with two layers of identity-based encryption. These components are tied together using suitable zero-knowledge argument systems.
Fichier principal
Vignette du fichier
gs-mdo.pdf (797.41 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01302790 , version 1 (15-04-2016)


  • HAL Id : hal-01302790 , version 1


Benoît Libert, Fabrice Mouhartem, Khoa Nguyen. A Lattice-Based Group Signature Scheme with Message-Dependent Opening. 14th International Conference on Applied Cryptography and Network Security (ACNS 2016), Jun 2016, Guildford, United Kingdom. ⟨hal-01302790⟩
363 View
1045 Download


Gmail Facebook X LinkedIn More