How to aggregate the CL signature scheme

Authored book
(Volume of book series)

Publication Details

Author(s): Schröder D
Publication year: 2011
Title of series: Computer Security - ESORICS 2011
Pages range: 298-314
ISBN: 9783642238215


We present an aggregate signature scheme whose public key consists of only two group elements. It is therefore the first sequential aggregate signature scheme with short keys in the standard model. Our construction relies on the Camenisch-Lysyanskaya signature scheme (Crypto 2004) and is provably secure under the LRSW assumption. Moreover, we develop a novel aggregation technique that we call aggregate-extension technique. The basic idea is to extend the aggregate by a single element and to use this additional space to "store" some information that would be lost due to the compression of the signatures. We believe that this technique might be of independent interest. © 2011 Springer-Verlag.

FAU Authors / FAU Editors

Schröder, Dominique Prof. Dr.
Lehrstuhl für Informatik 13 (Angewandte Kryptographie)

How to cite

Schröder, D. (2011). How to aggregate the CL signature scheme.

Schröder, Dominique. How to aggregate the CL signature scheme. 2011.


Last updated on 2018-12-12 at 20:50