平成24年3月 先端暗号フロンティアセミナー アブストラクト

花岡 悟一郎
題名: グループ署名における署名の乗っ取りに関する安全性について
アブストラクト: 本発表では、グループ署名の安全性について整理を行い、 標準的な安全性の定義ではとらえられていない潜在的な攻撃シナリオの 存在可能性について議論を行う。具体的には、ある利用者が発行した 正規の署名について、別の不正な利用者が自分の署名であると主張する ケースについて論ずる。このようなケースは、電子オークションなどの アプリケーションにおいて、慎重な対応が必要となる。

The 4th Meeting for Cryptology Frontier Group Abstract


Goichiro Hanaoka
Title: On the Security of Dynamic Group Signatures: Preventing Signature Hijacking
Abstract: We identify a potential weakness in the standard security model for dynamic group signatures which appears to have been overlooked previously. More specifically, we highlight that even if a scheme provably meets the security requirements of the model, a malicious group member can potentially claim ownership of a group signature produced by an honest group member by forging a proof of ownership. This property leads to a number of vulnerabilities in scenarios in which dynamic group signatures are likely to be used. We furthermore show that the dynamic group signature scheme by Groth (ASIACRYPT 2007) does not provide protection against this type of malicious behavior. To address this, we introduce the notion of \emph{opening soundness} for group signatures which essentially requires that it is infeasible to produce a proof of ownership of a valid group signature for any user except the original signer. We then show a relatively simple modification of the scheme by Groth which allows us to prove opening soundness for the modified scheme without introducing any additional assumptions. We believe that opening soundness is an important and natural security requirement for group signatures, and hope that future schemes will adopt this type of security.

[Back ]