CONSPIRACY ATTACKS ON THE THRESHOLD RSA SIGNATURE SCHEME
Chuan-Ming Li, Tzonelih Hwang, Narn-Yih Lee · Cryptologia · 1994
Shared generation of secure signatures, called threshold signatures, was introduced by Desmedt and Frankel in 1991. A threshold signature scheme is not only a threshold scheme but also a signature scheme. Therefore, it should possess the properties of both threshold scheme and digital signature scheme. In this paper, we investigate conspiracy attacks, that can impersonate any group to generate a signature, on the Desmedt-Frankel threshold RSA signature scheme. We also discuss the requirements of secure threshold signature schemes.