Digital signatures as one central cryptographic building block. Different security goals and security definitions for digital signatures, followed by a variety of popular and fundamental signature schemes with their security analyses.
Learning objective
The student knows a variety of techniques to construct and analyze the security of digital signature schemes. This includes modularity as a central tool of constructing secure schemes, and reductions as a central tool to proving the security of schemes.
Content
We will start with several definitions of security for signature schemes, and investigate the relations among them. We will proceed to generic (but inefficient) constructions of secure signatures, and then move on to a number of efficient schemes based on concrete computational hardness assumptions. On the way, we will get to know paradigms such as hash-then-sign, one-time signatures, and chameleon hashing as central tools to construct secure signatures.
Literature
Jonathan Katz, "Digital Signatures."
Prerequisites / Notice
Ideally, students will have taken the D-INFK Bachelors course "Information Security" or an equivalent course at Bachelors level.
Performance assessment
Performance assessment information (valid until the course unit is held again)
Performance assessment as a semester course