<abstract xmlns="http://www.w3.org/1999/xhtml"><p> In recent years, quite some progress has been made in understand- ing the security of encryption schemes in the presence of key-dependent plaintexts. Here, we motivate and explore the security of a setting, where an adversary against a signature scheme can access signatures on key-dependent messages.</p><p>We propose a way to formalize the security of signature schemes in the pres- ence of key-dependent signatures (KDS). It turns out that the situation is quite different from key-dependent encryption: already to achieve KDS-security under non-adaptive chosen message attacks, the use of a stateful signing algorithm is inevitable-even in the random oracle model. After discussing the connection be- tween key-dependent signing and forward security, we present a compiler to lift any EUF-CMA secure one-time signature scheme to a forward secure signature scheme offering KDS-CMA security.</p></abstract>

In recent years, quite some progress has been made in understand- ing the security of encryption schemes in the presence of key-dependent plaintexts. Here, we motivate and explore the security of a setting, where an adversary against a signature scheme can access signatures on key-dependent messages.We propose a way to formalize the security of signature schemes in the pres- ence of key-dependent signatures (KDS). It turns out that the situation is quite different from key-dependent encryption: already to achieve KDS-security under non-adaptive chosen message attacks, the use of a stateful signing algorithm is inevitable-even in the random oracle model. After discussing the connection be- tween key-dependent signing and forward security, we present a compiler to lift any EUF-CMA secure one-time signature scheme to a forward secure signature scheme offering KDS-CMA security.

Security of signature schemes in the presence of key-dependent messages

Cybernetica AS Akadeemia tee 21 EE–12618 Tallinn ESTONIA

Department of Mathematical Sciences Florida Atlantic University 777 Glades Road Boca Raton, FL 33431U.S.A.

Tatra Mountains Mathematical Publications

{"article-title":"Security of signature schemes in the presence of key-dependent messages"}

In recent years, quite some progress has been made in understand- ing the security of encryption schemes in the presence of key-dependent plaintexts. Here, we...

Security of signature schemes in the presence of key-dependent messages

Published Online: Nov 13, 2012

Page range: 15 - 29

DOI: https://doi.org/10.2478/v10127-010-0029-2

Keywords
signature scheme, key-dependent message, forward security.

This content is open access.

Security of signature schemes in the presence of key-dependent messages

Published Online: Nov 13, 2012

Page range: 15 - 29

DOI: https://doi.org/10.2478/v10127-010-0029-2

Keywordssignature scheme, key-dependent message, forward security.

This content is open access.

Keywords
signature scheme, key-dependent message, forward security.