Paper 2025/1703
Updatable Signature from Lattices
Abstract
Updatable Signature (US) schemes allow updating signatures so that they can be verified using a new key. This updating feature is useful for key rotation in practice. Cini et al. (PKC'21) first formalised this primitive. However, their post-quantum-secure US scheme does not satisfy their security definition, i.e., without unlinkability and only bounded unforgeability. This paper aims to solve this problem by providing a new fully secure construction. First, we simplify the definition of unlinkability by a hybrid argument, and reduce the update oracle of the unforgeability experiment by assuming unlinkability. Then, we construct our US scheme from verifiable encryption and the SIS assumption. This scheme is fully unlinkable and unforgeable, but also a unique signature scheme in each epoch, allowing only one signature for each message during one epoch and rendering a stateful signer/proxy. This is sufficient for many applications.
Metadata
- Available format(s)
-
PDF
- Category
- Public-key cryptography
- Publication info
- Preprint.
- Keywords
- Updatable signatureSISGPV signature
- Contact author(s)
- haotian yin23 @ student xjtlu edu cn
- History
- 2025-09-20: approved
- 2025-09-19: received
- See all versions
- Short URL
- https://ia.cr/2025/1703
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2025/1703,
author = {Haotian Yin and Jie Zhang and Wanxin Li and Yuji Dong and Eng Gee Lim and Dominik Wojtczak},
title = {Updatable Signature from Lattices},
howpublished = {Cryptology {ePrint} Archive, Paper 2025/1703},
year = {2025},
url = {https://eprint.iacr.org/2025/1703}
}