“Oops, I did it again” – Security of one-time signatures under two-message attacks

L. Groot Bruinderink, A.T. Hülsing

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/CongresprocedureConferentiebijdrageAcademicpeer review

9 Citaten (Scopus)


One-time signatures (OTS) are called one-time, because the accompanying security reductions only guarantee security under single-message attacks. However, this does not imply that efficient attacks are possible under two-message attacks. Especially in the context of hash-based OTS (which are basic building blocks of recent standardization proposals) this leads to the question if accidental reuse of a one-time key pair leads to immediate loss of security or to graceful degradation. In this work we analyze the security of the most prominent hash-based OTS, Lamport’s scheme, its optimized variant, and WOTS, under different kinds of two-message attacks. Interestingly, it turns out that the schemes are still secure under two message attacks, asymptotically. However, this does not imply anything for typical parameters. Our results show that for Lamport’s scheme, security only slowly degrades in the relevant attack scenarios and typical parameters are still somewhat secure, even in case of a two-message attack. As we move on to optimized Lamport and its generalization WOTS, security degrades faster and faster, and typical parameters do not provide any reasonable level of security under two-message attacks.

Originele taal-2Engels
TitelSelected Areas in Cryptography – SAC 2017
Subtitel24th International Conference, Ottawa, ON, Canada, August 16-18, 2017, Revised Selected Papers
RedacteurenCarlisle Adams , Jan Camenisch
Plaats van productieCham
Aantal pagina's24
ISBN van elektronische versie978-3-319-72565-9
ISBN van geprinte versie978-3-319-72564-2
StatusGepubliceerd - 2018
Evenement24th International Conference on Selected Areas in Cryptography (SAC 2017) - Ottawa, Canada
Duur: 16 aug. 201718 aug. 2017
Congresnummer: 24

Publicatie series

NaamLecture Notes in Computer Science
ISSN van geprinte versie0302-9743
NaamSecurity and Cryptology


Congres24th International Conference on Selected Areas in Cryptography (SAC 2017)
Verkorte titelSAC 2017


Duik in de onderzoeksthema's van '“Oops, I did it again” – Security of one-time signatures under two-message attacks'. Samen vormen ze een unieke vingerafdruk.

Citeer dit