File Download

There are no files associated with this item.

  Links for fulltext
     (May Require Subscription)
Supplementary

Conference Paper: DualRing: Generic Construction of Ring Signatures with Efficient Instantiations

TitleDualRing: Generic Construction of Ring Signatures with Efficient Instantiations
Authors
KeywordsRing signature
Generic construction
Sum argument
M-LWE/SIS
Issue Date2021
PublisherSpringer.
Citation
Yuen, TH ... et al. DualRing: Generic Construction of Ring Signatures with Efficient Instantiations. In Malkin, T & Peikert, C (eds.), Advances in Cryptology – CRYPTO 2021: 41st Annual International Cryptology Conference, CRYPTO 2021, Virtual Event, August 16–20, 2021. Proceedings, Part I, p. 251-281. Cham: Springer, 2021 How to Cite?
AbstractWe introduce a novel generic ring signature construction, called DualRing, which can be built from several canonical identification schemes (such as Schnorr identification). DualRing differs from the classical ring signatures by its formation of two rings: a ring of commitments and a ring of challenges. It has a structural difference from the common ring signature approaches based on accumulators or zero-knowledge proofs of the signer index. Comparatively, DualRing has a number of unique advantages. Considering the DL-based setting by using Schnorr identification scheme, our DualRing structure allows the signature size to be compressed into logarithmic size via an argument of knowledge system such as Bulletproofs. We further improve on the Bulletproofs argument system to eliminate about half of the computation while maintaining the same proof size. We call this Sum Argument and it can be of independent interest. This DL-based construction, named DualRing-EC, using Schnorr identification with Sum Argument has the shortest ring signature size in the literature without using trusted setup. Considering the lattice-based setting, we instantiate DualRing by a canonical identification based on M-LWE and M-SIS. In practice, we achieve the shortest lattice-based ring signature, named DualRing-LB, when the ring size is between 4 and 2000. DualRing-LB is also 5 × faster in signing and verification than the fastest lattice-based scheme by Esgin et al. (CRYPTO’19).
Persistent Identifierhttp://hdl.handle.net/10722/304339
ISBN
Series/Report no.Lecture Notes in Computer Science (LNCS) ; v. 12825

 

DC FieldValueLanguage
dc.contributor.authorYuen, TH-
dc.contributor.authorEsgin, MF-
dc.contributor.authorLiu, JK-
dc.contributor.authorAu, AMH-
dc.contributor.authorDing, Z-
dc.date.accessioned2021-09-23T08:58:40Z-
dc.date.available2021-09-23T08:58:40Z-
dc.date.issued2021-
dc.identifier.citationYuen, TH ... et al. DualRing: Generic Construction of Ring Signatures with Efficient Instantiations. In Malkin, T & Peikert, C (eds.), Advances in Cryptology – CRYPTO 2021: 41st Annual International Cryptology Conference, CRYPTO 2021, Virtual Event, August 16–20, 2021. Proceedings, Part I, p. 251-281. Cham: Springer, 2021-
dc.identifier.isbn9783030842413-
dc.identifier.urihttp://hdl.handle.net/10722/304339-
dc.description.abstractWe introduce a novel generic ring signature construction, called DualRing, which can be built from several canonical identification schemes (such as Schnorr identification). DualRing differs from the classical ring signatures by its formation of two rings: a ring of commitments and a ring of challenges. It has a structural difference from the common ring signature approaches based on accumulators or zero-knowledge proofs of the signer index. Comparatively, DualRing has a number of unique advantages. Considering the DL-based setting by using Schnorr identification scheme, our DualRing structure allows the signature size to be compressed into logarithmic size via an argument of knowledge system such as Bulletproofs. We further improve on the Bulletproofs argument system to eliminate about half of the computation while maintaining the same proof size. We call this Sum Argument and it can be of independent interest. This DL-based construction, named DualRing-EC, using Schnorr identification with Sum Argument has the shortest ring signature size in the literature without using trusted setup. Considering the lattice-based setting, we instantiate DualRing by a canonical identification based on M-LWE and M-SIS. In practice, we achieve the shortest lattice-based ring signature, named DualRing-LB, when the ring size is between 4 and 2000. DualRing-LB is also 5 × faster in signing and verification than the fastest lattice-based scheme by Esgin et al. (CRYPTO’19).-
dc.languageeng-
dc.publisherSpringer.-
dc.relation.ispartofAdvances in Cryptology – CRYPTO 2021: 41st Annual International Cryptology Conference-
dc.relation.ispartofseriesLecture Notes in Computer Science (LNCS) ; v. 12825-
dc.subjectRing signature-
dc.subjectGeneric construction-
dc.subjectSum argument-
dc.subjectM-LWE/SIS-
dc.titleDualRing: Generic Construction of Ring Signatures with Efficient Instantiations-
dc.typeConference_Paper-
dc.identifier.emailYuen, TH: johnyuen@hku.hk-
dc.identifier.emailAu, AMH: manhoau@hku.hk-
dc.identifier.authorityYuen, TH=rp02426-
dc.identifier.authorityAu, AMH=rp02638-
dc.description.naturelink_to_subscribed_fulltext-
dc.identifier.doi10.1007/978-3-030-84242-0_10-
dc.identifier.hkuros325052-
dc.identifier.spage251-
dc.identifier.epage281-
dc.publisher.placeCham-
dc.identifier.eisbn9783030842420-

Export via OAI-PMH Interface in XML Formats


OR


Export to Other Non-XML Formats