History-Free Sequential Aggregate Signatures from Generic Trapdoor Functions

ePrint Report: History-Free Sequential Aggregate Signatures from Generic Trapdoor Functions

Alessio Meneghetti, Edoardo Signorini

A sequential aggregate signature (SAS) scheme allows multiple users to sequentially combine their respective signatures in order to reduce communication costs. Historically, early proposals required the use of trapdoor permutation (e.g., RSA).
In recent years, a number of attempts have been made to extend SAS schemes to post-quantum assumptions. Many post-quantum signatures have been proposed in the hash-and-sign paradigm, which requires the use of trapdoor functions …

communication eprint report free functions history order proposals report rsa sas signature signatures