Redactable Signatures for Independent Removal of Structure and Content (Extended)
Kai Samelin, Henrich C. Pöhls, Arne Bilzhause, Joachim Posegga, Hermann de Meer · 2012
In this paper, we present a provably secure redactable sig- nature scheme allowing to independently redact structure and content. We identify the problems when structure is not separated from content, resulting in an attack on the scheme proposed at VLDB '08 by Kundu and Bertino. The attack allows for changing the semantic meaning of a given tree. We introduce a rigid security model, including consecutive redaction control, to formalize the required behaviour of our scheme. Moreover, we present rst performance evaluations of our implementa- tion to demonstrate the practical use of the presented scheme.