International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

How to Break and Repair a Universally Composable Signature Functionality

Authors:
Michael Backes
Dennis Hofheinz
Download:
URL: http://eprint.iacr.org/2003/240
Search ePrint
Search Google
Abstract: Canetti and Rabin recently proposed a universally composable ideal functionality F_SIG for digital signatures. We show that this functionality cannot be securely realized by \emph{any} signature scheme, thereby disproving their result that any signature scheme that is existentially unforgeable under adaptive chosen-message attack is a secure realization. Next, an improved signature functionality is presented. We show that our improved functionality can be securely realized by precisely those signature schemes that are secure against existential forgery under adaptive chosen-message attacks.
BibTeX
@misc{eprint-2003-11953,
  title={How to Break and Repair a Universally Composable Signature Functionality},
  booktitle={IACR Eprint archive},
  keywords={cryptographic protocols / digital signature schemes, universal composability, adaptive chosen-message attack},
  url={http://eprint.iacr.org/2003/240},
  note={ hofheinz@ira.uka.de 12375 received 19 Nov 2003, last revised 19 Nov 2003},
  author={Michael Backes and Dennis Hofheinz},
  year=2003
}