On the Relation between Redactable and Sanitizable Signature Schemes
نویسندگان
چکیده
Malleable signature schemes (MSS) enable a third party to alter signed data in a controlled way, maintaining a valid signature after an authorized change. Most well studied cryptographic constructions are (1) redactable signatures (RSS), and (2) sanitizable signatures (SSS). RSSs allow the removal of blocks from a signed document, while SSSs allow changing blocks to arbitrary strings. We rigorously prove that RSSs are less expressive than SSSs: no unforgeable RSS can be transformed into an SSS. For the opposite direction we give a black-box transformation of a single SSS, with tightened security, into an RSS.
منابع مشابه
Redactable vs. Sanitizable Signatures
Malleable signature schemes allow altering signed data in a controlled way while keeping the signature verifiable trusting the signer’s key. Several constructions exists. They can be grouped in two different categories: (1) redactable signatures (RSS) and (2) sanitizable signatures (SSS). RSSs allow for removing blocks of a signed document, while SSSs offer the possibility to change all admissi...
متن کاملMalleable Signatures for Resource Constrained Platforms
Malleable signatures allow the signer to control alterations to a signed document. The signer limits alterations to certain parties and to certain parts defined during signature generation. Admissible alterations do not invalidate the signature and do not involve the signer. These properties make them a versatile tool for several application domains, like e-business and health care. We implemen...
متن کاملISSN 1342-2812 Sanitizable Signature with Secret Information
A sanitizable signature scheme is a signature scheme that allows the sanitizer to sanitize certain portions of the document and to generate the valid signature of the resulting document with no interaction with the signer. There exist many models and schemes for sanitizable signature. In this paper, we precisely formalize the algorithms and the security requirements of sanitizable signature wit...
متن کاملEfficient Transparent Redactable Signatures with a Single Signature Invocation
A redactable signature scheme is one that allows the original signature to be used, usually along with some additional data, to verify certain carefully specified changes to the original document that was signed, namely the removal or redaction of subdocuments. For redactable signatures, the term transparency has been used to describe a scheme that hides the number and locations of redacted sub...
متن کاملSanitizable Signcryption: Sanitization over Encrypted Data (Full Version)
We initiate the study of sanitizable signatures over encrypted data. While previous solutions for sanitizable signatures require the sanitizer to know, in clear, the original message-signature pair in order to generate the new signature, we investigate the case where these data should be hidden from the sanitizer and how this can be achieved with encryption. We call this primitive sanitizable s...
متن کامل