Blockchain-Envisioned Post-Quantum Secure Sanitizable Signature for Audit Logs Management (2312.16322v2)
Abstract: Audit logs are one of the most important tools for transparently tracking system events and maintaining continuous oversight in corporate organizations and enterprise business systems. There are many cases where the audit logs contain sensitive data, or the audit logs are enormous. In these situations, dealing with a subset of the data is more practical than the entire data set. To provide a secure solution to handle these issues, a sanitizable signature scheme (SSS) is a viable cryptographic primitive. Herein, we first present the first post-quantum secure multivariate-based SSS, namely Mul-SAN. Our proposed design provides unforgeability, privacy, immutability, signer accountability, and sanitizer accountability under the assumption that the MQ problem is NP-hard. Mul-SAN is very efficient and only requires computing field multiplications and additions over a finite field for its implementation. Mul-SAN presents itself as a practical method to partially delegate control of the authenticated data in avenues like the healthcare industry and government organizations. We also explore using Blockchain to provide a tamper-proof and robust audit log mechanism.
- Towards blockchain-driven, secure and transparent audit logs. In Proceedings of the 15th EAI International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services (2018), pp. 443–448.
- Sanitizable signatures. In European Symposium on Research in Computer Security (2005), Springer, pp. 159–177.
- Cloud data integrity checking using bilinear pairing and network coding. Cluster Computing 22 (2019), 6927–6935.
- Post-quantum cryptography. Nature 549, 7671 (2017), 188–194.
- Oil and vinegar: Modern parameters and implementations. IACR Transactions on Cryptographic Hardware and Embedded Systems (2023), 321–365.
- Unlinkable and invisible gamma -sanitizable signatures. In International Conference on Applied Cryptography and Network Security (2021), Springer, pp. 251–283.
- Security of sanitizable signatures revisited. In International Workshop on Public Key Cryptography (2009), Springer, pp. 317–336.
- Sanitizable signatures: How to partially delegate control for authenticated data. BIOSIG 2009: biometrics and electronic signatures (2009).
- Unlinkability of sanitizable signatures. In International Workshop on Public Key Cryptography (2010), Springer, pp. 444–461.
- Efficient invisible and unlinkable sanitizable signatures. In IACR International Workshop on Public Key Cryptography (2019), Springer, pp. 159–189.
- Current state of multivariate cryptography. IEEE Security & Privacy 15, 4 (2017), 28–36.
- Multivariate cryptography. In Multivariate Public Key Cryptosystems. Springer, 2020, pp. 7–23.
- High-speed fpga implementation of the nist round 1 rainbow signature scheme. In 2018 International Conference on ReConFigurable Computing and FPGAs (ReConFig) (2018), IEEE, pp. 1–8.
- Efficient unlinkable sanitizable signatures from signatures with re-randomizable keys. IET Information Security 12, 3 (2018), 166–183.
- Computers and intractability, vol. 174. freeman San Francisco, 1979.
- An efficient data integrity auditing protocol for cloud computing. Future Generation Computer Systems 109 (2020), 306–316.
- Enabling fast public auditing and data dynamics in cloud services. IEEE Transactions on Services Computing 15, 4 (2020), 2047–2059.
- A survey on blockchain-based integrity auditing for cloud data. Digital Communications and Networks 8, 5 (2022), 591–603.
- Efficient sanitizable signatures without random oracles. In European Symposium on Research in Computer Security (2016), Springer, pp. 363–380.
- Id-based sanitizable signature data integrity auditing scheme with privacy-preserving. Computers & Security 121 (2022), 102858.
- Lattice-based cryptography. In Post-quantum cryptography. Springer, 2009, pp. 147–191.
- Nakkar, M. Secure Hardware Implementation of Post Quantum Cryptosystems. PhD thesis, Concordia University, 2017.
- Fault analysis-resistant implementation of rainbow signature scheme. In 2017 29th International Conference on Microelectronics (ICM) (2017), IEEE, pp. 1–5.
- Policy-based sanitizable signatures. In Cryptographers’ Track at the RSA Conference (2020), Springer, pp. 538–563.
- Efficient invisible and unlinkable sanitizable signatures. In Public-Key Cryptography–PKC 2019: 22nd IACR International Conference on Practice and Theory of Public-Key Cryptography, Beijing, China, April 14-17, 2019, Proceedings, Part I (2019), vol. 11442, Springer, p. 159.
- Data integrity auditing without private key storage for secure cloud storage. IEEE Transactions on Cloud Computing 9, 4 (2019), 1408–1421.
- A high-speed public-key signature scheme for 8-b iot-constrained devices. IEEE Internet of Things Journal 7, 4 (2020), 3663–3677.
- An overview of hash based signatures. Cryptology ePrint Archive (2023).
- Publicly verifiable shared dynamic electronic health record databases with functional commitment supporting privacy-preserving integrity auditing. IEEE Transactions on Cloud Computing 10, 3 (2020), 2050–2065.
- Lightweight certificate-based public/private auditing scheme based on bilinear pairing for cloud storage. IEEE Access 8 (2019), 2258–2271.
- Yi, H. Under quantum computer attack: Is rainbow a replacement of rsa and elliptic curves on hardware? Security and Communication Networks 2018 (2018).
- A rainbow-based authentical scheme for securing smart connected health systems. Journal of medical systems 43, 8 (2019), 1–10.
- High-speed hardware architecture for implementations of multivariate signature generations on fpgas. EURASIP Journal on Wireless Communications and Networking 2018, 1 (2018), 1–9.
- Cl-bosic: A distributed agent-oriented scheme for remote data integrity check and forensics in public cloud. In International Conference on Intelligent Computing (2023), Springer, pp. 425–441.
- Owl: A data sharing scheme with controllable anonymity and integrity for group users. Computer Communications 209 (2023), 455–468.
Sponsor
Paper Prompts
Sign up for free to create and run prompts on this paper using GPT-5.
Top Community Prompts
Collections
Sign up for free to add this paper to one or more collections.