Paper 2011/486 Original: eprint.iacr.org/2011/486 ↗
On the Joint Security of Encryption and Signature, Revisited
Abstract
We revisit the topic of joint security for combined public key schemes, wherein a single keypair is used for both encryption and signature primitives in a secure manner. While breaking the principle of key separation, such schemes have attractive properties and are sometimes used in practice. We give a general construction for a combined public key scheme having joint security that uses IBE as a component and that works in the standard model. We provide a more efficient direct construction, also in the standard model. We then consider the problem of how to build signcryption schemes from jointly secure combined public key schemes. We provide a construction that uses any such scheme to produce a triple of schemes -- signature, encryption, and signcryption -- that are jointly secure in an appropriate and strong security model.
Metadata
- Available format(s)
PDF- Category
- Public-key cryptography
- Publication info
- Preprint.
- History
- 2011-09-12: last updated
- 2011-09-10: published
- Short URL
- https://ia.cr/2011/486
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2011/486,
author = {Kenneth G. Paterson and Jacob C. N. Schuldt and Martijn Stam and Susan Thomson},
title = {On the Joint Security of Encryption and Signature, Revisited},
howpublished = {Cryptology {ePrint} Archive, Paper 2011/486},
year = {2011},
url = {https://eprint.iacr.org/2011/486}
}