Full Text Views
54
We propose a new lattice-based digital signature scheme MLWRSign by modifying Dilithium, which is one of the second-round candidates of NIST's call for post-quantum cryptographic standards. To the best of our knowledge, our scheme MLWRSign is the first signature scheme whose security is based on the (module) learning with rounding (LWR) problem. Due to the simplicity of the LWR, the secret key size is reduced by approximately 30% in our scheme compared to Dilithium, while achieving the same level of security. Moreover, we implemented MLWRSign and observed that the running time of our scheme is comparable to that of Dilithium.
Hiroki OKADA
KDDI Research, Inc.
Atsushi TAKAYASU
The University of Tokyo
Kazuhide FUKUSHIMA
KDDI Research, Inc.
Shinsaku KIYOMOTO
KDDI Research, Inc.
Tsuyoshi TAKAGI
The University of Tokyo
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Copy
Hiroki OKADA, Atsushi TAKAYASU, Kazuhide FUKUSHIMA, Shinsaku KIYOMOTO, Tsuyoshi TAKAGI, "A Compact Digital Signature Scheme Based on the Module-LWR Problem" in IEICE TRANSACTIONS on Fundamentals,
vol. E104-A, no. 9, pp. 1219-1234, September 2021, doi: 10.1587/transfun.2020DMP0012.
Abstract: We propose a new lattice-based digital signature scheme MLWRSign by modifying Dilithium, which is one of the second-round candidates of NIST's call for post-quantum cryptographic standards. To the best of our knowledge, our scheme MLWRSign is the first signature scheme whose security is based on the (module) learning with rounding (LWR) problem. Due to the simplicity of the LWR, the secret key size is reduced by approximately 30% in our scheme compared to Dilithium, while achieving the same level of security. Moreover, we implemented MLWRSign and observed that the running time of our scheme is comparable to that of Dilithium.
URL: https://global.ieice.org/en_transactions/fundamentals/10.1587/transfun.2020DMP0012/_p
Copy
@ARTICLE{e104-a_9_1219,
author={Hiroki OKADA, Atsushi TAKAYASU, Kazuhide FUKUSHIMA, Shinsaku KIYOMOTO, Tsuyoshi TAKAGI, },
journal={IEICE TRANSACTIONS on Fundamentals},
title={A Compact Digital Signature Scheme Based on the Module-LWR Problem},
year={2021},
volume={E104-A},
number={9},
pages={1219-1234},
abstract={We propose a new lattice-based digital signature scheme MLWRSign by modifying Dilithium, which is one of the second-round candidates of NIST's call for post-quantum cryptographic standards. To the best of our knowledge, our scheme MLWRSign is the first signature scheme whose security is based on the (module) learning with rounding (LWR) problem. Due to the simplicity of the LWR, the secret key size is reduced by approximately 30% in our scheme compared to Dilithium, while achieving the same level of security. Moreover, we implemented MLWRSign and observed that the running time of our scheme is comparable to that of Dilithium.},
keywords={},
doi={10.1587/transfun.2020DMP0012},
ISSN={1745-1337},
month={September},}
Copy
TY - JOUR
TI - A Compact Digital Signature Scheme Based on the Module-LWR Problem
T2 - IEICE TRANSACTIONS on Fundamentals
SP - 1219
EP - 1234
AU - Hiroki OKADA
AU - Atsushi TAKAYASU
AU - Kazuhide FUKUSHIMA
AU - Shinsaku KIYOMOTO
AU - Tsuyoshi TAKAGI
PY - 2021
DO - 10.1587/transfun.2020DMP0012
JO - IEICE TRANSACTIONS on Fundamentals
SN - 1745-1337
VL - E104-A
IS - 9
JA - IEICE TRANSACTIONS on Fundamentals
Y1 - September 2021
AB - We propose a new lattice-based digital signature scheme MLWRSign by modifying Dilithium, which is one of the second-round candidates of NIST's call for post-quantum cryptographic standards. To the best of our knowledge, our scheme MLWRSign is the first signature scheme whose security is based on the (module) learning with rounding (LWR) problem. Due to the simplicity of the LWR, the secret key size is reduced by approximately 30% in our scheme compared to Dilithium, while achieving the same level of security. Moreover, we implemented MLWRSign and observed that the running time of our scheme is comparable to that of Dilithium.
ER -