Secure and practical threshold RSA

  • Authors:
  • Jérôme Dossogne;Frédéric Lafitte;Dirk Van Heule

  • Affiliations:
  • Université Libre de Bruxelles (ULB), Brussels, Belgium;Royal Military Academy, Brussels, Belgium;Royal Military Academy, Brussels, Belgium

  • Venue:
  • Proceedings of the 6th International Conference on Security of Information and Networks
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

This article describes a scheme that outputs RSA signatures using a threshold mechanism in which each share has a bitlength close to the bitlength of the RSA modulus. The scheme is proven unforgeable under the standard RSA assumption against an honest but curious adversary that has static corruption capabilities. Previous practical and provably secure schemes require to introduce a factor n! [33] and 2kt [15] in the exponent when computing the partial signatures, where n is the RSA modulus, t + 1 the threshold and k a fixed parameter. Our scheme requires only t + 1 modular exponentiations and l + 1 modular multiplications, with t the threshold and l the number of participants.