Synchronized Aggregate Signatures from the RSA Assumption Brent - PowerPoint PPT Presentation

Synchronized Aggregate Signatures from the RSA Assumption Brent Waters Susan Hohenberger

Aggregate Signatures [Boneh-Gentry-Lynn-Shacham03] Idea: Compress several signatures into one PK 3 PK 1 PK 2 PK n … M 3 M 1 M 2 M n … Sig 1 Sig 2 Sig 3 Sig n Sig Agg … Suggested Applications: (1) BGP Routing (2) Certificate Chains 2

Synchronized Aggregate (A) Sign at “periods” (B) Must aggregate on same period (C) Sign once per period Suggested Applications: (1) Sensor network reporting (2) Block chain as synchronization point

Prior work Gentry-Ramzan 06 • Bilinear maps • ID-based • Random oracle model Ahn-Green-Hohenberger10 • Bilinear maps • Standard model Our Results Aggregate-signatures from RSA (standard model) ID-based Aggregate-signatures from RSA (RO model)

This Talk Part I: A Basic RSA Scheme Part II: Shrinking the Signing Time Part III: Performance Glimpse 5

Part I A Basic RSA Scheme 6