“Oops, I did it again” – Security of one-time signatures under two-message attacks

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/CongresprocedureConferentiebijdrageAcademicpeer review

1 Citaat (Scopus)

Samenvatting

One-time signatures (OTS) are called one-time, because the accompanying security reductions only guarantee security under single-message attacks. However, this does not imply that efficient attacks are possible under two-message attacks. Especially in the context of hash-based OTS (which are basic building blocks of recent standardization proposals) this leads to the question if accidental reuse of a one-time key pair leads to immediate loss of security or to graceful degradation. In this work we analyze the security of the most prominent hash-based OTS, Lamport’s scheme, its optimized variant, and WOTS, under different kinds of two-message attacks. Interestingly, it turns out that the schemes are still secure under two message attacks, asymptotically. However, this does not imply anything for typical parameters. Our results show that for Lamport’s scheme, security only slowly degrades in the relevant attack scenarios and typical parameters are still somewhat secure, even in case of a two-message attack. As we move on to optimized Lamport and its generalization WOTS, security degrades faster and faster, and typical parameters do not provide any reasonable level of security under two-message attacks.

Originele taal-2Engels
TitelSelected Areas in Cryptography – SAC 2017
Subtitel24th International Conference, Ottawa, ON, Canada, August 16-18, 2017, Revised Selected Papers
RedacteurenCarlisle Adams , Jan Camenisch
Plaats van productieCham
UitgeverijSpringer
Hoofdstuk15
Pagina's299-322
Aantal pagina's24
ISBN van elektronische versie978-3-319-72565-9
ISBN van geprinte versie978-3-319-72564-2
DOI's
StatusGepubliceerd - 2018
Evenement24th International Conference on Selected Areas in Cryptography (SAC 2017) - Ottawa, Canada
Duur: 16 aug 201718 aug 2017
Congresnummer: 24

Publicatie series

NaamLecture Notes in Computer Science
UitgeverijSpringer
Volume10719
ISSN van geprinte versie0302-9743
NaamSecurity and Cryptology
UitgeverijSpringer

Congres

Congres24th International Conference on Selected Areas in Cryptography (SAC 2017)
Verkorte titelSAC 2017
LandCanada
StadOttawa
Periode16/08/1718/08/17

    Vingerafdruk

Citeer dit

Groot Bruinderink, L., & Hülsing, A. T. (2018). “Oops, I did it again” – Security of one-time signatures under two-message attacks. In C. Adams , & J. Camenisch (editors), Selected Areas in Cryptography – SAC 2017: 24th International Conference, Ottawa, ON, Canada, August 16-18, 2017, Revised Selected Papers (blz. 299-322). (Lecture Notes in Computer Science; Vol. 10719), (Security and Cryptology). Cham: Springer. https://doi.org/10.1007/978-3-319-72565-9_15