Forward-Secure Signatures for Unbounded Time Periods in Mobile Computing Applications
Prashant Koulgi · 2007
� Summary Messagestransmittedinuntrustedmobileenvironmen tsmaybe� securedbysigningthemusingDigitalSignaturealg orithms.� Forward*SecureDigitalSignaturesenablethesigner �toguarantee� thesecurityofmessagessignedinthepastevenif �hissecretkey� isexposedtoday.�WepresentaForward*Securelike� signature� schemewiththefollowingfeatures:�TheverifierBo bcanverify� messagessignedbyAlicewithouthimselfbeingable �toforge� suchsignatures.� Ifanadversary� (maybeservicepr ovider� himself)�gainsaccesstoeitherBob's�(verification )�keyorAlice's� (presentsigning)�key,�neverthelesshecannotforge �Alice'spast� signatures.� Whencomparedtootherexistingforward *secure� schemes,�ourschemecanbeusedtosignforunbound ednumber� oftimeperiodswithminimumsecretkeysizeandsi gnaturesize.� �