On the (In)Security of the BUFF Transform

ePrint Report: On the (In)Security of the BUFF Transform

Jelle Don, Serge Fehr, Yu-Hsuan Huang, Patrick Struck

The BUFF transform is a generic transformation for digital signature schemes, with the purpose of obtaining additional security properties beyond standard unforgeability, e.g., exclusive ownership and non-resignability. In the call for additional post-quantum signatures, these were explicitly mentioned by the NIST as ``additional desirable security properties'', and some of the submissions indeed refer to the BUFF transform with the purpose of achieving them, …

beyond call digital digital signature don eprint report exclusive non ownership post-quantum purpose quantum report security signature signatures standard transformation