Paper 2023/1477 Original: eprint.iacr.org/2023/1477 ↗
G+G: A Fiat-Shamir Lattice Signature Based on Convolved Gaussians
Abstract
We describe an adaptation of Schnorr's signature to the lattice setting, which relies on Gaussian convolution rather than flooding or rejection sampling as previous approaches. It does not involve any abort, can be proved secure in the ROM and QROM using existing analyses of the Fiat-Shamir transform, and enjoys smaller signature sizes (both asymptotically and for concrete security levels).
Metadata
- Available format(s)
PDF- Category
- Public-key cryptography
- Publication info
- Preprint.
- History
- 2023-11-13: last updated
- 2023-09-26: published
- Short URL
- https://ia.cr/2023/1477
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2023/1477,
author = {Julien Devevey and Alain Passelègue and Damien Stehlé},
title = {G+G: A Fiat-Shamir Lattice Signature Based on Convolved Gaussians},
howpublished = {Cryptology {ePrint} Archive, Paper 2023/1477},
year = {2023},
url = {https://eprint.iacr.org/2023/1477}
}