Efficient Optimal Ate Pairing at 128-Bit Security Level

Khandaker, Md. Al-Amin; Nanjo, Yuki; Ghammam, Loubna; Duquesne, Sylvain; Nogami, Yasuyuki; Kodera, Yuta

doi:10.1007/978-3-319-71667-1_10

Cited by 12 publications

(1 citation statement)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…On the computation time for deriving fresh verification key, signing, and verification, verification is the most expensive, since it needs one paring computation. According to the experimental results by Khandaker et al [44,Section 4], for the parameter suggested above, on a usual computation environment (Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz, 4GB Memory), one pairing computation needs less than 8 ms.…”

Section: B Implementationmentioning

confidence: 99%

Key-Insulated and Privacy-Preserving Signature Scheme with Publicly Derived Public Key

Liu

Yang

Wong³

et al. 2019

2019 IEEE European Symposium on Security and Privacy (EuroS&P)

View full text Add to dashboard Cite

Since the introduction of Bitcoin in 2008, cryptocurrency has been undergoing a quick and explosive development. At the same time, privacy protection, one of the key merits of cryptocurrency, has attracted much attention by the community. A deterministic wallet algorithm and a stealth address algorithm have been widely adopted in the community, due to their virtues on functionality and privacy protection, which come from a key derivation mechanism that an arbitrary number of derived keys can be generated from a master key. However, these algorithms suffer a vulnerability. In particular, when a minor fault happens (say, one derived key is compromised somehow), the damage is not limited to the leaked derived key only, instead, it spreads to the master key and all derived keys are compromised. In this paper, to provide a formal treatment for the problem, we introduce and formalize a new signature variant, called Key-Insulated and Privacy-Preserving Signature Scheme with Publicly Derived Public Key (PDPKS), which forms a convenient and robust cryptographic tool for offering the virtues of deterministic wallet and stealth address, while eliminating the security vulnerabilities. Specifically, PDPKS allows anyone to derive new signature verification keys for a user, say Alice, based on her long-term public key, while only Alice can derive the signing keys corresponding to those verification keys. In terms of privacy, given a derived verification key and valid signatures with respect to it, an adversary is not able to tell which long-term public key, out of a set of known long-term public keys, is the one from which the verification key was derived. A distinguishing security feature of PDPKS, with the above functionality and privacy features, is that the derived keys are independent/insulated from each other, namely, compromising the signing key associated with a verification key does not allow an adversary to forge a valid signature for another verification key, even if both verification keys are derived from the same long-term public key. We formalize the notion of PDPKS and propose a practical and proven secure construction, which could be a convenient and secure cryptographic tool for building privacy-preserving cryptocurrencies and supporting promising use cases in practice, as it can be used to implement secure stealth addresses, and can be used to implement deterministic wallets and the related appealing use cases, without security concerns.

show abstract

Section: B Implementationmentioning

confidence: 99%