Paper 2005/192 Original: eprint.iacr.org/2005/192 ↗
On the security and the efficiency of the Merkle signature scheme
Abstract
This paper builds on the multi-time signature scheme proposed by Merkle. We prove that the original scheme is existentially unforgeable under adaptive chosen message attack. Moreover, we present an improved version which has three advantages: It is provably forward secure. The number of signatures that can be made with one private key is --- in a practical sense --- unlimited. Finally, the cost for key generation is kept low. The theoretical exposition is complemented by experimental data about the efficiency of the improved Merkle signature scheme.
Metadata
- Available format(s)
PDF- Category
- Public-key cryptography
- Publication info
- Preprint.
- History
- 2005-06-23: last updated
- 2005-06-23: published
- Short URL
- https://ia.cr/2005/192
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2005/192,
author = {Carlos Coronado},
title = {On the security and the efficiency of the Merkle signature scheme},
howpublished = {Cryptology {ePrint} Archive, Paper 2005/192},
year = {2005},
url = {https://eprint.iacr.org/2005/192}
}