How to leak a secret

DMCA

How to leak a secret (2001)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Ronald L. Rivest , Adi Shamir , Yael Tauman

Venue:	PROCEEDINGS OF THE 7TH INTERNATIONAL CONFERENCE ON THE THEORY AND APPLICATION OF CRYPTOLOGY AND INFORMATION SECURITY: ADVANCES IN CRYPTOLOGY
Citations:	2576 - 4 self

BibTeX

@INPROCEEDINGS{Rivest01howto,
    author = {Ronald L. Rivest and Adi Shamir and Yael Tauman},
    title = {How to leak a secret},
    booktitle = {PROCEEDINGS OF THE 7TH INTERNATIONAL CONFERENCE ON THE THEORY AND APPLICATION OF CRYPTOLOGY AND INFORMATION SECURITY: ADVANCES IN CRYPTOLOGY},
    year = {2001},
    pages = {554--567},
    publisher = {Springer-Verlag}
}

OpenURL

Abstract

In this paper we formalize the notion of a ring signature, which makes it possible to specify a set of possible signers without revealing which member actually produced the signature. Unlike group signatures, ring signatures have no group managers, no setup procedures, no revocation procedures, and no coordination: any user can choose any set of possible signers that includes himself, and sign any message by using his secret key and the others ’ public keys, without getting their approval or assistance. Ring signatures provide an elegant way to leak authoritative secrets in an anonymous way, to sign casual email in a way which can only be verified by its intended recipient, and to solve other problems in multiparty computations. The main contribution of this paper is a new construction of such signatures which is unconditionally signer-ambiguous, provably secure in the random oracle model, and exceptionally efficient: adding each ring member increases the cost of signing or verifying by a single modular multiplication and a single symmetric encryption.

Keyphrases

possible signer setup procedure elegant way group manager casual email others public key authoritative secret multiparty computation unlike group single symmetric encryption random oracle model ring signature anonymous way intended recipient secret key single modular multiplication new construction main contribution revocation procedure

DMCA