Lattice-based Group Signature Scheme with Verifier-local Revocation

Adeline Langlois (1, 2) , San Ling (3) , Khoa Nguyen (3) , Huaxiong Wang (3)

1 ARIC - Arithmetic and Computing
2 LIP - Laboratoire de l'Informatique du Parallélisme
3 Division of Mathematical Sciences [Singapore]

Support of membership revocation is a desirable functionality for any group signature scheme. Among the known revocation approaches, verifier-local revocation (VLR) seems to be the most flexible one, because it only requires the verifiers to possess some up-to-date revocation information, but not the signers. All of the contemporary VLR group signatures operate in the bilinear map setting, and all of them will be insecure once quantum computers become a reality. In this work, we introduce the first lattice-based VLR group signature, and thus, the first such scheme that is believed to be quantum-resistant. In comparison with existing lattice-based group signatures, our scheme has several noticeable advantages: support of membership revocation, logarithmic-size signatures, and weaker security assumption. In the random oracle model, our scheme is proved to be secure based on the hardness of the SIVP_{SoftO(n^{1.5})}$ problem in general lattices - an assumption that is as weak as those of state-of-the-art lattice-based standard signatures. Moreover, our construction works without relying on encryption schemes, which is an intriguing feature for group signatures.

Mots clés: group signatures; verifier-local revocation; lattice-based cryptography

Domaines: Cryptographie et sécurité [cs.CR]

Adeline Langlois, San Ling, Khoa Nguyen, Huaxiong Wang. Lattice-based Group Signature Scheme with Verifier-local Revocation. Public-Key Cryptography - PKC2014, Mar 2014, Buenos Aires, Argentina. pp.345-361, ⟨10.1007/978-3-642-54631-0⟩. ⟨hal-00983084⟩