论文信息 - On the Security of NTRUSign signature scheme

On the Security of NTRUSign signature scheme

A new type of signature scheme, called NTRUSign, based on solving the approximately closest vector problem in a NTRU lattice was proposed at CT-RSA’03. However no security proof against chosen messages attack has been made for this scheme. In this paper, we show that NTRUSign signature scheme contains the weakness of malleability. From this, one can derive new valid signatures from any previous message-signature pair which means that NTRUSign is not secure against strongly existential forgery. Finally, we propose a simple technique to avoid this flaw in NTRUSign scheme.

Kwangjo Kim | G Yamamoto | Sj Min

[1] Joseph H. Silverman,et al. NTRU: A Ring-Based Public Key Cryptosystem , 1998, ANTS.

[2] Louis Granboulan. How to Repair ESIGN , 2002, SCN.

[3] Joseph H. Silverman,et al. Version 2 Title : Enhanced Encoding and Verification Methods for the NTRU Signature Scheme , 2001 .

[4] Silvio Micali,et al. A Digital Signature Scheme Secure Against Adaptive Chosen-Message Attacks , 1988, SIAM J. Comput..

[5] Ilya Mironov. A Note on Cryptanalysis of the Preliminary Version of the NTRU Signature Scheme , 2001, IACR Cryptol. ePrint Arch..

[6] William Whyte,et al. NTRUSIGN: Digital Signatures Using the NTRU Lattice , 2003, CT-RSA.

[7] Jacques Stern,et al. Security Proofs for Signature Schemes , 1996, EUROCRYPT.

[8] Jacques Stern,et al. Flaws in Applying Proof Methodologies to Signature Schemes , 2002, CRYPTO.

[9] Henri Cohen,et al. A course in computational algebraic number theory , 1993, Graduate texts in mathematics.

[10] Craig Gentry,et al. Cryptanalysis of the Revised NTRU Signature Scheme , 2002, EUROCRYPT.

[11] Craig Gentry,et al. Cryptanalysis of the NTRU Signature Scheme (NSS) from Eurocrypt 2001 , 2001, ASIACRYPT.

[12] Joseph H. Silverman,et al. NSS: An NTRU Lattice-Based Signature Scheme , 2001, EUROCRYPT.