A Detailed Analysis of Fiat-Shamir with Aborts

ePrint Report: A Detailed Analysis of Fiat-Shamir with Aborts

Julien Devevey, Pouria Fallahpour, Alain Passelègue, Damien Stehlé

Lyubashevky's signatures are based on the Fiat-Shamir with Aborts paradigm. It transforms an interactive identification protocol that has a non-negligible probability of aborting into a signature by repeating executions until a loop iteration does not trigger an abort. Interaction is removed by replacing the challenge of the verifier by the evaluation of a hash function, modeled as a random oracle in the analysis. …

analysis challenge eprint report evaluation function hash hash function identification loop non paradigm protocol report signature signatures trigger