Short one-time signatures
Greg Zaverucha, Douglas R. Stinson · Advances in Mathematics of Communications · 2011
We present a new one-time signature scheme having short signatures. Our newscheme is also the first one-time signature scheme that supports aggregation, batchverification, and which admits efficient proofs of knowledge. It has a fastsigning algorithm, requiring only modular additions, and its verification cost iscomparable to ECDSA verification. These properties make our scheme suitablefor applications on resource-constrained devices such as smart cards and sensornodes.