Title
Proper Usage of the Group Signature Scheme in ISO/IEC 20008-2
Abstract
In ISO/IEC 20008-2, several anonymous digital signature schemes are specified. Among these, the scheme denoted as Mechanism 6, is the only plain group signature scheme that does not aim at providing additional functionalities. The Intel Enhanced Privacy Identification (EPID) scheme, which has many applications in connection with Intel Software Guard Extensions (Intel SGX), is in practice derived from Mechanism 6. In this paper, we firstly show that Mechanism 6 does not satisfy anonymity in the standard security model, i.e., the Bellare-Shi-Zhang model [CT-RSA 2005]. We then provide a detailed analysis of the security properties offered by Mechanism 6 and characterize the conditions under which its anonymity is preserved. Consequently, it is seen that Mechanism 6 is secure under the condition that the issuer, who generates user signing keys, does not join the attack. We also derive a simple patch for Mechanism~6 from the analysis.
Year
DOI
Venue
2019
10.1145/3321705.3329824
PROCEEDINGS OF THE 2019 ACM ASIA CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY (ASIACCS '19)
Keywords
Field
DocType
Group signature, Cryptanalysis, ISO/IEC 20008-2, SGX
Computer science,Group signature,Computer hardware
Journal
Volume
ISBN
Citations 
2019
978-1-4503-6752-3
1
PageRank 
References 
Authors
0.36
0
5
Name
Order
Citations
PageRank
Ai Ishida152.81
Yusuke Sakai2198.19
Keita Emura331636.97
Goichiro Hanaoka4910101.53
Keisuke Tanaka55412.51