Fusion One-Time Non-Interactively-Aggregatable Digital Signatures From Lattices

ePrint Report: Fusion One-Time Non-Interactively-Aggregatable Digital Signatures From Lattices

Brandon Goodell, Aaron Feickert

We present Fusion, a post-quantum one-time digital signature scheme with non-interactive aggregation with security resting on the short integer solution problem over ideal lattices. Fusion is structurally similar to CRYSTALS-Dilithium, but Fusion is based upon the aggregatable one-time lattice-based scheme by Boneh and Kim. Fusion parameters conservatively target at least 128 bits of security against forgery, taking tightness gaps into account, and with tighter bounds than the …

aaron aggregation bits digital digital signature digital signatures eprint report forgery fusion integer kim non post-quantum problem quantum report security signature signatures solution target