发表机构
Nagoya City University; Institute of Science Tokyo（名古屋市立大学; 东京科学大学）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
本文提出一种基于层次身份基签名（HIBS）的前缀可穿刺签名通用构造，将穿刺后签名密钥大小从二次方降至 O(lQ^{Punc})，显著优于现有方案。
AI 中文摘要
可穿刺签名由 Bellare 等人（EUROCRYPT 2016）提出，允许对签名密钥进行穿刺（更新），使其丧失对特定消息的签名能力，同时保留对其他所有消息的签名能力。Halevi 等人（ASIACRYPT 2017）引入了前缀可穿刺签名，其中签名密钥可以针对目标前缀进行穿刺，从而无法对前缀与目标前缀匹配的消息进行签名。迄今为止，已经提出了若干前缀可穿刺签名方案的通用构造，包括基于身份基签名（IBS）的构造（ESORICS 2022）和基于委托受限签名的构造（IEEE Trans. Inf. Forensics Secure. 2024）。然而，这些构造在密钥大小方面存在缺陷。当前缀空间为所有 l 位字符串的集合时，前一种构造需要由 2^{l} 个 IBS 签名密钥组成的签名密钥。后一种构造在实例化为基于格的委托受限签名方案时，产生的穿刺后签名密钥的大小随穿刺操作次数 Q^{Punc} 呈二次方增长。在本文中，我们提出了一种基于层次身份基签名（HIBS）方案的前缀可穿刺签名的通用构造。当前缀空间为 {0,1}^{l} 且我们的构造使用 Ruckert（PQC 2010）提出的基于格的 HIBS 方案 HIBS^{GPV} 进行实例化时，我们的构造实现了穿刺后签名密钥大小以 O(lQ^{Punc}) 为界。
英文摘要
Puncturable signatures, proposed by Bellare et al. (EUROCRYPT 2016), allow a signing key to be punctured (updated) so that it loses the ability to sign particular messages while retaining the ability to sign all others. Halevi et al. (ASIACRYPT 2017) introduced prefix puncturable signatures, in which the signing key can be punctured with respect to a target prefix so that it cannot sign messages whose prefixes match the target prefix. So far, several generic constructions of prefix puncturable signature schemes have been proposed, including constructions based on identity-based signatures (IBS) (ESORICS 2022) and delegated constrained signatures (IEEE Trans. Inf. Forensics Secure. 2024). However, these constructions suffer from drawbacks in terms of key size. When the prefix space is the set of all l-bit strings, the former construction requires a signing key consisting of 2^{l} IBS signing keys. The latter construction, when instantiated with a lattice-based delegated constrained signature scheme, yields a punctured signing key whose size grows quadratically with the number of puncturing operations Q^{Punc}. In this paper, we present a generic construction of prefix puncturable signatures from hierarchical identity-based signature (HIBS) schemes. When the prefix space is {0,1}^{l} and our construction is instantiated with the lattice-based HIBS scheme HIBS^{GPV} by Ruckert (PQC 2010), our construction achieves a punctured signing key size bounded by O(lQ^{Punc}).
CommentsA preliminary version of this paper is appeared in the 28th International Conference on Information and Communications Security (ICICS 2026)
