Security of sanitizable signatures revisited

Brzuska C, Fischlin M, Freudenreich T, Lehmann A, Page M, Schelbert J, Schröder D, Volk F (2009)

Publication Status: Published

Publication Type: Authored book, Volume of book series

Publication year: 2009

Series: Public Key Cryptography - PKC 2009

Book Volume: 5443

Pages Range: 317-336

Event location: Irvine, CA

DOI: 10.1007/978-3-642-00468-1_18


Sanitizable signature schemes, as defined by Ateniese et al. (ESORICS 2005), allow a signer to partly delegate signing rights to another party, called the sanitizer. That is, the sanitizer is able to modify a predetermined part of the original message such that the integrity and authenticity of the unchanged part is still verifiable. Ateniese et al. identify five security requirements for such schemes (unforgeability, immutability, privacy, transparency and accountability) but do not provide formal specifications for these properties. They also present a scheme that is supposed to satisfy these requirements. Here we revisit the security requirements for sanitizable signatures and, for the first time, present a comprehensive formal treatment. Besides a full characterization of the requirements we also investigate the relationship of the properties, showing for example that unforgeability follows from accountability. We then provide a full security proof for a modification of the original scheme according to our model. © International Association for Cryptologic Research 2009.

Authors with CRIS profile

How to cite


Brzuska, C., Fischlin, M., Freudenreich, T., Lehmann, A., Page, M., Schelbert, J.,... Volk, F. (2009). Security of sanitizable signatures revisited.


Brzuska, Chris, et al. Security of sanitizable signatures revisited. 2009.

BibTeX: Download