caa a22 4500 475827155 CHVBK 20180406123831.0 cr unu---uuuuu 170329e20000901xx s 000 0 eng 10.1007/s001450010001 doi (NATIONALLICENCE)springer-10.1007/s001450010001 RSA-Based Undeniable Signatures [Elektronische Daten] [Rosario Gennaro, Tal Rabin, Hugo Krawczyk] Abstract. : We present the first undeniable signatures scheme based on RSA. Since their introduction in 1989 a significant amount of work has been devoted to the investigation of undeniable signatures. So far, this work has been based on discrete log systems. In contrast, our scheme uses regular RSA signatures to generate undeniable signatures. In this new setting, both the signature and verification exponents of RSA are kept secret by the signer, while the public key consists of a composite modulus and a sample RSA signature on a single public message. Our scheme possesses several attractive properties. First, provable security, as forging the undeniable signatures is as hard as forging regular RSA signatures. Second, both the confirmation and denial protocols are zero-knowledge. In addition, these protocols are efficient (particularly, the confirmation protocol involves only two rounds of communication and a small number of exponentiations). Furthermore, the RSA-based structure of our scheme provides with simple and elegant solutions to add several of the more advanced properties of undeniable signatures found in the literature, including convertibility of the undeniable signatures (into publicly verifiable ones), the possibility to delegate the ability to confirm and deny signatures to a third party without giving up the power to sign, and the existence of distributed (threshold) versions of the signing and confirmation operations. Due to the above properties and the fact that our undeniable nsignatures are identical in form to standard RSA signatures, the scheme we present becomes a very attractive candidate for practical implementations. International Association for Criptologic Rese, 2000 Key words. Undeniable signatures, RSA, Zero-knowledge nationallicence Gennaro Rosario IBM T.J. Watson Research Center, PO Box 704, Yorktown Heights, NY 10598, U.S.A. rosario@watson.ibm.com, talr@watson.ibm.com, US aut Rabin Tal IBM T.J. Watson Research Center, PO Box 704, Yorktown Heights, NY 10598, U.S.A. rosario@watson.ibm.com, talr@watson.ibm.com, US aut Krawczyk Hugo IBM T.J. Watson Research Center, PO Box 704, Yorktown Heights, NY 10598, U.S.A. and Department of Electrical Engineering, Technion, Haifa 32000, Israel hugo@ee.technion.ac.il, IL aut Journal of Cryptology Springer Berlin Heidelberg 13/4(2000-09-01), 397-416 0933-2790 13:4<397 2000 13 145 https://doi.org/10.1007/s001450010001 text/html Onlinezugriff via DOI 1 research-article jats NATIONALLICENCE 856 40 https://doi.org/10.1007/s001450010001 text/html Onlinezugriff via DOI NATIONALLICENCE 700 1- Gennaro Rosario IBM T.J. Watson Research Center, PO Box 704, Yorktown Heights, NY 10598, U.S.A. rosario@watson.ibm.com, talr@watson.ibm.com, US aut NATIONALLICENCE 700 1- Rabin Tal IBM T.J. Watson Research Center, PO Box 704, Yorktown Heights, NY 10598, U.S.A. rosario@watson.ibm.com, talr@watson.ibm.com, US aut NATIONALLICENCE 700 1- Krawczyk Hugo IBM T.J. Watson Research Center, PO Box 704, Yorktown Heights, NY 10598, U.S.A. and Department of Electrical Engineering, Technion, Haifa 32000, Israel hugo@ee.technion.ac.il, IL aut NATIONALLICENCE 773 0- Journal of Cryptology Springer Berlin Heidelberg 13/4(2000-09-01), 397-416 0933-2790 13:4<397 2000 13 145 Metadata rights reserved Springer special CC-BY-NC licence nationallicence SWISSBIB 463436636 BK010053 XK010053 XK010000 NATIONALLICENCE NATIONALLICENCE NL-springer