Sequential Half-Aggregation of Lattice-Based Signatures

ePrint Report: Sequential Half-Aggregation of Lattice-Based Signatures

Katharina Boudgoust, Akira Takahashi

With Dilithium and Falcon, NIST selected two lattice-based signature schemes during their post-quantum standardization project. Whereas Dilithium follows the Fiat-Shamir with Aborts (Lyubashevsky, Asiacrypt'09) blueprint, Falcon can be seen as an optimized version of the GPV-paradigm (Gentry et al., STOC'06). An important question now is whether those signatures allow additional features such as the aggregation of distinct signatures. One example are sequential aggregate signature (SAS) schemes (Boneh et al., …

aggregation asiacrypt eprint report falcon features important nist paradigm post-quantum project quantum question report signature signatures standardization version