Hash-Based Signatures
This content discusses the security requirements of hash-based signatures, particularly focusing on XMSS (eXtended Merkle Signature Scheme). It highlights the minimal security requirements of digital signature schemes and the key aspects of XMSS security, such as resistance to chosen message attacks. The content also covers the intractability assumption and the role of collision-resistant hash functions in ensuring digital signature scheme security.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
Hash-Based Signatures Johannes Buchmann, Andreas H lsung Supported by DFG and DAAD Part X: XMSS Security
XMSS has Minimal Security Requirements
Security Requirements of Current Signature Schemes Intractability assumption Collision resistant hash function Digital signature scheme
Minimal Security Requirement of Signatures Digital signature scheme One-way FF Naor, Yung 1989 Rompel 1990
XMSS has minimal security requirements XMSS Existential unforgeable under chosen message attacks Second-preimage resistant HFF Target-collision resistant HFF Pseudorandom FF XMSS Rompel 1990 H stad, Impagliazzo, Levin, Luby 1999 Goldreich, Goldwasser, Micali 1986 Digital signature scheme One-way FF Naor, Yung 1989 Rompel 1990
Security proof [BDH, PQC 2011] XMSS is EU-CMA PRFF [BDEHR., Africacrypt 2011] WOTS$ is EU-CMA [BDH, PQC 2011] SPR-HFF [ DOTV, PQC 2008] XMSS is forward secure XMSS-Tree + WOTS is EU-CMA
