首页/论文/2002.07419

arXiv 2002.074192020-02cs.CR

Security analysis of the W-OTS$^+$ signature scheme: Updating security bounds

M. A. Kudinov, E. O. Kiktenko, A. K. Fedorov

备注：: 16 pages, 1 figure, 1 table
发表信息：: Mat. Vopr. Kriptogr. 12, 129 (2021)
DOI：: 10.4213/mvk362

英文摘要：

In this work, we discuss in detail a flaw in the original security proof of the W-OTS${^+}$ variant of the Winternitz one-time signature scheme, which is an important component for various stateless and stateful many-time hash-based digital signature schemes. We update the security proof for the W-OTS${^+}$ scheme and derive the corresponding security level. Our result is of importance for the security analysis of hash-based digital signature schemes.

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

阅读原文

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

本文内容

英文摘要相关论文

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

继续探索

相关论文

Quantum-access security of the Winternitz one-time signature scheme

Quantum-access security, where an attacker is granted superposition access to secret-keyed functionalities, is a fundamental security model and its study has inspired results in post-quantum security. We revisit, and fill a gap in, the quantum-access security analysis of the Lamport one-time signature scheme (OTS) in the quantum random oracle model (QROM) by Alagic et al.~(Eurocrypt 2020). We then go on to generalize the technique to the Winternitz OTS. Along the way, we develop a tool for the analysis of hash chains in the QROM based on the superposition oracle technique by Zhandry (Crypto 20…

2021-06-24cs.CRquant-ph

A General Approach for Securely Querying and Updating XML Data

Over the past years several works have proposed access control models for XML data where only read-access rights over non-recursive DTDs are considered. A few amount of works have studied the access rights for updates. In this paper, we present a general model for specifying access control on XML data in the presence of update operations of W3C XQuery Update Facility. Our approach for enforcing such updates specifications is based on the notion of query rewriting where each update operation defined over arbitrary DTD (recursive or not) is rewritten to a safe one in order to be evaluated only o…

2012-01-31cs.CRcs.DB

基于伪随机数生成器的一次性签名

One-Time Signature Based on Pseudorandom Number Generator

本研究提出一种基于伪随机数生成器的一次性签名算法，属于后量子密码范畴，通过实验验证了其在不同参数下的性能与安全性。

2024-12-23cs.CReess.SP

Updating Quantum Cryptography Report ver. 1

Quantum cryptographic technology (QCT) is expected to be a fundamental technology for realizing long-term information security even against as-yet-unknown future technologies. More advanced security could be achieved using QCT together with contemporary cryptographic technologies. To develop and spread the use of QCT, it is necessary to standardize devices, protocols, and security requirements and thus enable interoperability in a multi-vendor, multi-network, and multi-service environment. This report is a technical summary of QCT and related topics from the viewpoints of 1) consensual establi…

2009-05-27cs.CRquant-ph

SmartCert: Redesigning Digital Certificates with Smart Contracts

The Transport Layer Security (TLS) protocol and its public-key infrastructure (PKI) are widely used in the Internet to achieve secure communication. Validating domain ownership by trusted certification authorities (CAs) is a critical step in issuing digital certificates, but unfortunately, this process provides a poor security level. In this work, we present SmartCert, a novel approach based on smart contracts to improve digital certificates. A certificate in SmartCert conveys detailed information about its validation state which is constantly changing but only with respect to the specified sm…

2020-03-30cs.CR

基于自动OpenAPI映射的API安全

API Security Based on Automatic OpenAPI Mapping

Ariel University（阿里埃尔大学）

本文提出Map Reduce Graph方法，通过无监督学习实时建模和安全保护HTTP REST API，实现自动化的OpenAPI文档生成，并在多个API层攻击中达到高召回率和完美精度。

2026-04-21cs.CR

更多相关论文收起更多论文

CSUM：一种在保持真实性与完整性的同时更新立方体卫星的新机制

CSUM: A Novel Mechanism for Updating CubeSat while Preserving Authenticity and Integrity

本文提出轻量级 CubeSat 更新机制 CSUM，利用哈希链保障软件更新广播的完整性、认证与数据新鲜度，实验证明其可在资源受限环境下高效验证更新，且比传统机制至少快 61 倍。

2024-06-30cs.CR

I-(OT)^2: 面向物联网设备的客户端最优的不经意传输协议

I-(OT)^2: A Client-optimal Oblivious Transfer Protocol for IoT Devices

King Abdullah University of Science and Technology (KAUST)（阿卜杜拉国王科技大学）

针对物联网设备等客户端计算受限场景，提出一种基于二次剩余问题的1-out-of-2不经意传输协议，通过轻量级离线预计算将在线计算负担几乎全部转移给发送方，显著降低接收方计算和通信开销。

2026-06-01cs.CR

How Does Blockchain Security Dictate Blockchain Implementation?

Blockchain protocols come with a variety of security guarantees. For example, BFT-inspired protocols such as Algorand tend to be secure in the partially synchronous setting, while longest chain protocols like Bitcoin will normally require stronger synchronicity to be secure. Another fundamental distinction, directly relevant to scalability solutions such as sharding, is whether or not a single untrusted user is able to point to *certificates*, which provide incontrovertible proof of block confirmation. Algorand produces such certificates, while Bitcoin does not. Are these properties accidental…

2021-11-05cs.CRcs.DC

When to Reset Your Keys: Optimal Timing of Security Updates via Learning

Tulane University（杜兰大学）；The Ohio State University（俄亥俄州立大学）；University of California, Davis（加利福尼亚大学戴维斯分校）

Cybersecurity is increasingly threatened by advanced and persistent attacks. As these attacks are often designed to disable a system (or a critical resource, e.g., a user account) repeatedly, it is crucial for the defender to keep updating its security measures to strike a balance between the risk of being compromised and the cost of security updates. Moreover, these decisions often need to be made with limited and delayed feedback due to the stealthy nature of advanced attacks. In addition to targeted attacks, such an optimal timing policy under incomplete information has broad applications i…

2016-12-02cs.AIcs.CRcs.LG

Certificate and Signature Free Anonymity for V2V Communications

Anonymity is a desirable feature for vehicle-to-vehicle (V2V) communications, but it conflicts with other requirements such as non-repudiation and revocation. Existing, pseudonym-based V2V communications schemes rely on certificate generation and signature verification. These schemes require cumbersome key management, frequent updating of certificate chains and other costly procedures such as cryptographic pairings. In this paper, we present novel V2V communications schemes, that provide authentication, authorization, anonymity, non-repudiation, replay protection, pseudonym revocation, and for…

2020-08-17cs.CRcs.NI

Blockchain based Privacy-Preserving Software Updates with Proof-of-Delivery for Internet of Things

A large number of IoT devices are connected via the Internet. However, most of these IoT devices are generally not perfect-by-design even have security weaknesses or vulnerabilities. Thus, it is essential to update these IoT devices securely, patching their vulnerabilities and protecting the safety of the involved users. Existing studies deliver secure and reliable updates based on blockchain network which serves as the transmission network. However, these approaches could compromise users privacy when updating the IoT devices. In this paper, we propose a new blockchain based privacy-preservin…

2019-02-11cs.CR