Paper 2026/180 Original: eprint.iacr.org/2026/180 ↗

Telling the Story of Chameleon Hash Functions: A 27-Year Review

Houssam Derfoufi
Marina Dehez-Clementi
Jean-Christophe DENEUVILLE
Abstract

Chameleon hash functions are trapdoor hashes that allow authorized adaptations while preserving security against outsiders. They appear in chameleon signatures, sanitizable and redactable structures, and several ledger mechanisms, yet the literature remains scattered. To our knowledge, no prior work has offered a dedicated survey or SoK on CHFs. This paper provides the first unified account, covering 1998 to 2025. We build a usable overview instead of a taxonomy dump. We collect the published constructions into a compact dataset that records underlying assumptions, trapdoor arrangements, and target security notions, and we place these results on a timeline from 1998 to 2025 to show how definitions and design choices evolved. We then provide simple maps that let the reader pivot between authorization models, trapdoor structure, and functional or algebraic features, keeping comparisons focused and avoiding unnecessary parameter detail. The result is a reference for making informed choices in real deployments. We end with a short set of future roads we believe are worth exploring, drawn from the gaps we observed and aimed at aligning CHF design with practical constraints and follow-up studies.

Metadata
Available format(s)
PDF
Category
Public-key cryptography
Publication info
Preprint.
History
2026-02-04: last updated
2026-02-04: published
Short URL
https://ia.cr/2026/180
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2026/180,
      author = {Houssam Derfoufi and Marina Dehez-Clementi and Jean-Christophe DENEUVILLE},
      title = {Telling the Story of Chameleon Hash Functions: A 27-Year Review},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/180},
      year = {2026},
      url = {https://eprint.iacr.org/2026/180}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.