Concurrent signatures with fully negotiable binding control

Authors:
Tsz Hon Yuen;Duncan S. Wong;Willy Susilo;Qiong Huang
Affiliations:
University of Hong Kong, Hong Kong;City University of Hong Kong, Hong Kong;University of Wollongong, Australia;South China Agricultural University, China
Venue:
ProvSec'11 Proceedings of the 5th international conference on Provable security
Year:
2011

Citing 9
Cited 0

Fair exchange with a semi-trusted third party (extended abstract)

Proceedings of the 4th ACM conference on Computer and communications security
Efficient verifiable encryption (and fair exchange) of digital signatures

CCS '99 Proceedings of the 6th ACM conference on Computer and communications security
GQ and Schnorr Identification Schemes: Proofs of Security against Impersonation under Active and Concurrent Attacks

CRYPTO '02 Proceedings of the 22nd Annual International Cryptology Conference on Advances in Cryptology
Ambiguous Optimistic Fair Exchange

ASIACRYPT '08 Proceedings of the 14th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Efficient optimistic fair exchange secure in the multi-user setting and chosen-key model without random oracles

CT-RSA'08 Proceedings of the 2008 The Cryptopgraphers' Track at the RSA conference on Topics in cryptology
Multi-party concurrent signatures

ISC'06 Proceedings of the 9th international conference on Information Security
The fairness of perfect concurrent signatures

ICICS'06 Proceedings of the 8th international conference on Information and Communications Security
Asymmetric concurrent signatures

ICICS'05 Proceedings of the 7th international conference on Information and Communications Security
Generic construction of (identity-based) perfect concurrent signatures

ICICS'05 Proceedings of the 7th international conference on Information and Communications Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Since the introduction of concurrent signatures, the authorship binding of concurrent signatures has always been initiator-controlled, that is, only the initiator of a concurrent signature exchange can control "whether" and "when" to convert the exchanging ambiguous signatures to publicly verifiable ones concurrently. This binding control is not negotiable. In some applications however, this limitation is undesirable, and instead, as of optimistic fair exchange does, letting the responder control "whether" and "when" to have exchanged ambiguous signatures bound is needed. This motivates us towards constructing a new concurrent signature variant which supports negotiation between the original initiator-controlled binding and a new responder-controlled binding. In this paper, we formalize the notion and propose the first construction, which allows either the initiator or the responder to control "whether" and "when" the binding of the exchanging ambiguous signatures will take place concurrently. The scheme is backward compatible to the original concurrent signature and is also comparable in performance to the existing ones.