Paper 2023/303 Original: eprint.iacr.org/2023/303 ↗

Fusion One-Time Non-Interactively-Aggregatable Digital Signatures From Lattices

Brandon Goodell
Aaron Feickert
Abstract

We present Fusion, a post-quantum one-time digital signature scheme with non-interactive aggregation with security resting on the short integer solution problem over ideal lattices. Fusion is structurally similar to CRYSTALS-Dilithium, but Fusion is based upon the aggregatable one-time lattice-based scheme by Boneh and Kim. Fusion parameters conservatively target at least $128$ bits of security against forgery, taking tightness gaps into account, and with tighter bounds than the BK scheme. Aggregate Fusion signatures are logarithmically sized in the number of keys, so aggregating enough signatures can be more efficient than stacking Dilithium or Falcon signatures.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Preprint.
History
2023-03-01: last updated
2023-03-01: published
Short URL
https://ia.cr/2023/303
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2023/303,
      author = {Brandon Goodell and Aaron Feickert},
      title = {Fusion One-Time Non-Interactively-Aggregatable Digital Signatures From Lattices},
      howpublished = {Cryptology {ePrint} Archive, Paper 2023/303},
      year = {2023},
      url = {https://eprint.iacr.org/2023/303}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.