Blind Schnorr signatures and signed ElGamal encryption in the algebraic group model
G Fuchsbauer, A Plouviez, Y Seurin - … on the Theory and Applications of …, 2020 - Springer
The Schnorr blind signing protocol allows blind issuing of Schnorr signatures, one of the
most widely used signatures. Despite its practical relevance, its security analysis is …
most widely used signatures. Despite its practical relevance, its security analysis is …
Privacy pass: Bypassing internet challenges anonymously
A Davidson, I Goldberg, N Sullivan… - Proceedings on …, 2018 - petsymposium.org
The growth of content delivery networks (CDNs) has engendered centralized control over
the serving of internet content. An unwanted by-product of this growth is that CDNs are fast …
the serving of internet content. An unwanted by-product of this growth is that CDNs are fast …
Short pairing-free blind signatures with exponential security
This paper proposes the first practical pairing-free three-move blind signature schemes that
(1) are concurrently secure,(2) produce short signatures (ie, three or four group …
(1) are concurrently secure,(2) produce short signatures (ie, three or four group …
Lattice-based blind signatures, revisited
We observe that all previously known lattice-based blind signature schemes contain subtle
flaws in their security proofs (eg, Rückert, ASIACRYPT'08) or can be attacked (eg, BLAZE by …
flaws in their security proofs (eg, Rückert, ASIACRYPT'08) or can be attacked (eg, BLAZE by …
On pairing-free blind signature schemes in the algebraic group model
Studying the security and efficiency of blind signatures is an important goal for privacy
sensitive applications. In particular, for large-scale settings (eg, cryptocurrency tumblers), it …
sensitive applications. In particular, for large-scale settings (eg, cryptocurrency tumblers), it …
Practical round-optimal blind signatures in the standard model
Round-optimal blind signatures are notoriously hard to construct in the standard model,
especially in the malicious-signer model, where blindness must hold under adversarially …
especially in the malicious-signer model, where blindness must hold under adversarially …
Boosting the security of blind signature schemes
Existing blind signature schemes that are secure for polynomially many concurrent
executions of the signing protocol are either inefficient or rely on non-standard assumptions …
executions of the signing protocol are either inefficient or rely on non-standard assumptions …
PI-cut-choo and friends: Compact blind signatures via parallel instance cut-and-choose and more
Blind signature schemes are one of the best-studied tools for privacy-preserving
authentication. Unfortunately, known constructions of provably secure blind signatures either …
authentication. Unfortunately, known constructions of provably secure blind signatures either …
Rai-choo! Evolving blind signatures to the next level
Blind signatures are a fundamental tool for privacy-preserving applications. Known
constructions of concurrently secure blind signature schemes either are prohibitively …
constructions of concurrently secure blind signature schemes either are prohibitively …
Non-interactive blind signatures for random messages
L Hanzlik - Annual International Conference on the Theory and …, 2023 - Springer
Blind signatures allow a signer to issue signatures on messages chosen by the signature
recipient. The main property is that the recipient's message is hidden from the signer. There …
recipient. The main property is that the recipient's message is hidden from the signer. There …