International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: Constructing Optimistic Fair Exchange Protocols from Committed Signatures

Huafei Zhu
Search ePrint
Search Google
Abstract: In PODC 2003, Park et al. \cite{PCSR} first introduce a connection between fair exchange and sequential two-party multi-signature scheme and provide a novel method of constructing fair exchange protocol by distributing the computation of RSA signature. This approach avoids the design of verifiable encryption scheme at the expense of having co-signer store a piece of prime signer's secret key. Dodis and Reyzin \cite{DR} showed that the protocol in \cite{PCSR} is totally breakable in the registration phase, then presented a remedy scheme which is provably secure in the random oracle model, by utilizing Boldyreva non-interactive two-party multi-signature scheme \cite{Bo}. Security in the random oracle model does not imply security in the real world. In this paper, we provide the first two efficient committed signatures which are provably secure in the standard complexity model from strong RSA assumption. Then we construct efficient optimistic fair exchange protocols from those new primitives.
  title={Constructing Optimistic Fair Exchange Protocols from Committed Signatures},
  booktitle={IACR Eprint archive},
  keywords={applications / fair exchange},
  note={new report 12293 received 28 Aug 2003},
  author={Huafei Zhu},