责任性子群多重签名的定义与实现

Definition and Implementation of Accountable-Subgroup Multisignatures

定义了一种多重签名机制 :责任性子群多重签名 (Accountable -SubgroupMultisignatures ,ASM )。ASM机制能够使已知的签名者G的任一子群S有效地签发消息M ,且签名可以向任一验证者证明S中每个签名者的身份。其中 ,第一个多重签名的安全形式化模型要包括密钥的产生 (在无可信任第三方的情况下 ) ;基于Schnorr数字签名的协议必须是可验证的和有效的 :每次签名只需三方通信 ;无论有多少个签名者 ,每个签名者的签名时间与单个Schnorr签名方案的时间相同 ;验证时间与单个Schnorr签名方案的验证时间相差无几 ;无论有多少个签名者 ,签名的长度与单个Schnorr签名方案的签名长度相同。

A multi-signature scheme, accountable-subgroup multisignature (ASM) was defined. ASM scheme enables any subgroup S of a given group of potential signers G to sign efficiently a message M, and the signature can prove the identities of the signers to any verifier. The first formal model of security for multisignature scheme explicitly includes key generation (without trusted third party). A protocol based on Schnorr's signature scheme must be both provable and efficient: only three rounds of communication are needed in each signature. The signing time per signer is as the same as that in single-signer Schnorr scheme, regardless of the number of signers. The verification time is only slightly greater than that for the single-signer Schnorr scheme. The signature length is the same as for the single-signer Schnorr scheme, regardless of the number of signers. The proof of security relies on Random oracles and the hardness of the discrete log problem.