Signature Schemes Based on the Strong RSA Assumption

We describe and analyze a new digital signature scheme. The new scheme is quite efficient, does not require the signer to maintain any state, and can be proven secure against adaptive chosen message attack under a reasonable intractability assumption, the so-called Strong RSA Assumption. Moreover, a hash function can be incorporated into the scheme in such a way that it is also secure in the random oracle model under the standard RSA Assumption.

By: V. Shoup, R. Cramer

Published in: Proceedings 6th ACM Conference on Computer and Communications Security (CCS '99), Singapore, ACM, p.46-51 in 1999

Please obtain a copy of this paper from your local library. IBM cannot distribute this paper externally.

Questions about this service can be mailed to reports@us.ibm.com .