A Detailed Analysis of Fiat-Shamir with Aborts - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

A Detailed Analysis of Fiat-Shamir with Aborts

Résumé

Lyubashevky’s signatures are based on the Fiat-Shamir with Aborts paradigm. It transforms an interactive identification protocol that has a non-negligible probability of aborting into a signature by repeating executions until a loop iteration does not trigger an abort. Interaction is removed by replacing the challenge of the verifier by the evaluation of a hash function, modeled as a random oracle in the analysis. The access to the random oracle is classical (ROM), resp. quantum (QROM), if one is interested in security against classical, resp. quantum, adversaries. Most analyses in the literature consider a setting with a bounded number of aborts (i.e., signing fails if no signature is output within a prescribed number of loop iterations), while practical instantiations (e.g., Dilithium) run until a signature is output (i.e., loop iterations are unbounded). In this work, we emphasize that combining random oracles with loop iterations induces numerous technicalities for analyzing correctness, run-time, and security of the resulting schemes, both in the bounded and unbounded case. As a first contribution, we put light on errors in all existing analyses. We then provide two detailed analyses in the QROM for the bounded case, adapted from Kiltz et al [EUROCRYPT’18] and Grilo et al [ASIACRYPT’21]. In the process, we prove the underlying -protocol to achieve a stronger zero-knowledge property than usually considered for -protocols with aborts, which enables a corrected analysis. A further contribution is a detailed analysis in the case of unbounded aborts, the latter inducing several additional subtleties.
Fichier non déposé

Dates et versions

hal-04334942 , version 1 (11-12-2023)

Licence

Paternité

Identifiants

Citer

Julien Devevey, Pouria Fallahpour, Alain Passelègue, Damien Stehlé. A Detailed Analysis of Fiat-Shamir with Aborts. Crypto 2023, Aug 2023, Santa Barbara, United States. pp.327-357, ⟨10.1007/978-3-031-38554-4_11⟩. ⟨hal-04334942⟩
24 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More