Overfull: Too Large Aggregate Signatures Based on Lattices - Archive ouverte HAL
Communication Dans Un Congrès Année : 2022

Overfull: Too Large Aggregate Signatures Based on Lattices

Résumé

The Fiat-Shamir with Aborts paradigm of Lyubashevsky has given rise to efficient lattice-based signature schemes. One popular implementation is Dilithium which is a finalist in an ongoing standardization process run by the NIST. Informally, it can be seen as a lattice analogue of the well-known discrete-logarithm-based Schnorr signature. An interesting research question is whether it is possible to combine several unrelated signatures, issued from different signing parties on different messages, into one single aggregated signature. Of course, its size should be significantly smaller than the trivial concatenation of all signatures. Ideally, the aggregation can be done offline by a third party, called public aggregation. Previous works have shown that it is possible to half-aggregate Schnorr signatures, but it was left unclear if the underlying techniques can be adapted to the lattice setting. In this work, we show that, indeed, we can use similar strategies to obtain a signature scheme allowing for public aggregation whose hardness is proven assuming the intractability of two well-studied problems on module lattices: The Module Learning With Errors problem (M-LWE) and the Module Short Integer Solution problem (M-SIS). Failure: Unfortunately, our scheme produces aggregated signatures that are larger than the trivial solution of concatenating. This is due to peculiarities that seem inherent to lattice-based cryptography. Its motivation is thus mainly pedagogical, as we explain the subtleties when designing lattice-based aggregate signatures that are supported by a proper security proof.
Fichier principal
Vignette du fichier
CFAIL2022-Signatures-5482.pdf (381.12 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03819329 , version 1 (18-10-2022)

Identifiants

  • HAL Id : hal-03819329 , version 1

Citer

Katharina Boudgoust, Adeline Roux-Langlois. Overfull: Too Large Aggregate Signatures Based on Lattices. CFAIL 2022, Aug 2022, Santa Barbara / Hybrid, France. ⟨hal-03819329⟩
84 Consultations
201 Téléchargements

Partager

More