Leveled Adaptively Strong-Unforgeable Identity-Based Fully Homomorphic Signatures

Abstract

The identity-based homomorphic signature (IBHS) enables an untrusted server to run some computation over the outsourced data and derive a short signature, vouching for the correctness of the output of the computation, while greatly simplifying key management. To our knowledge, constructions of IBHS have been few and far between. However, the existing IBHS schemes, which either handle only linear functions or has a large public key parameter and satisfies only the artificial notion of selective security. In this work, we construct the first leveled adaptively secure identity-based fully homomorphic signature (IBFHS) schemes without additional public parameters, which can be used to sign many different datasets. Thereby positively answering the open question of constructing a leveled IBFHS scheme with short public parameters, proposed by Wang et al., (ISC, 2015, Springer). We achieve the stronger security and better parameters by using the trapdoor vanishing and vector encoding technique. In our scheme, the size of every evaluated signature depends only logarithmically on the size of the input dataset, and the complexity of verifying a signature for a computation can be amortized when verifying the same computation on many different datasets. Furthermore, we prove that our construction is strongly-unforgeable against adaptively chosen identity and message attacks under the small integer solution (SIS) assumption in standard lattices.

Survey on Fully Homomorphic Encryption, Theory, and Applications

“…the attacker is only provided with signatures of chosen messages before the challenge is available). Adaptive security was first achieved by Boyen, Fan and Shi [259] and by subsequent works such as [257], [260]. Unfortunately, previous HS constructions have a limitation in terms of efficiency for circuits of polynomial depth [259].…”

Survey on Fully Homomorphic Encryption, Theory and Applications

“…the attacker is only provided with signatures of chosen messages before the challenge is available). Adaptive security was first achieved in [232] and by subsequent works such as [230], [233]. Unfortunately, previous HS constructions have a limitation in terms of efficiency for circuits of polynomial depth [232].…”

A Forward-secure Linearly Homomorphic Signature Scheme and its Application in the IoT

“…To overcome these restrictions, Gorbunov et al [27] presented the first (leveled) fully homomorphic signature (FHS) scheme, which can perform circuit evaluation of arbitrary polynomial depth on the signed data. Later, Wang et al [28] construct a strongly-unforgeable identitybased FHS scheme without additional public parameters, extending FHS to identity-based situations with stronger security and better parameters. Many settings involve input datasets authenticated by different clients, in order to further expand the utility of FHS, multiple-key FHS has recently attracted attention [29,30].…”