| Previous | [ 1] | [ 2] | [ 3] | [ 4] | [ 5] | [ 6] | [ 7] | [ 8] | [ 9] | [ 10] | [ 11] | [ 12] | [ 13] | [ 14] | [ 15] | [ 16] | [ 17] | [ 18] | [ 19] | [ 20] | [ 21] | [ 22] | [ 23] | [ 24] | [ 25] |
¡@
HAN-YU LIN, TZONG-SUN WU+ AND YI-SHIUNG YEH
Department of Computer Science
National Chiao Tung University
Hsinchu, 300 Taiwan
+Department of Computer Science and Engineering
National Taiwan Ocean University
Keelung, 202 Taiwan
A designated verifier signature (DVS) scheme is a special type of digital signature
scheme without the property of non-repudiation. Such schemes only allow the designated
verifier to validate the signer's signature. Meanwhile, the designated verifier is not able to
convince any third party of the signature¡¦s actual signer, since he can also generate a computationally
indistinguishable one compared to the received signature. A strong designated
verifier signature (SDVS) scheme further prohibits anyone except for the intended verifier
from validating the signature as it requires the designated verifier's private key to finish
the verification process. In this paper, we propose an efficient short SDVS scheme with
low computation costs. Unlike many SDVS schemes primarily implemented on pairingbased
cryptosystems, we focus on the discrete logarithms (DL) based system. Compared
with those DL based SDVS schemes, ours provides better functionalities and efficiency
and hence benefits the practical applications. In addition, the security requirement of unforgeability
against existential forgery on adaptive chosen-message attacks (EU-CMA) is
proved in the random oracle model.
Received June 15, 2009; revised November 11 & December 22, 2009; accepted February 9, 2010.
Communicated by Chin-Laung Lei.
+ Corresponding author.