Linear and lossy identification schemes derive tightly secure multisignatures

Masayuki Fukumitsu, Shingo Hasegawa

Research output: Contribution to journalArticlepeer-review


For the multisignature schemes, the tight security in the plain public key (PPK) model is considered as one of the desirable features. In this paper, we give a generic construction of multisignature schemes which is tightly secure in the PPK and random oracle model. Our construction can capture the known tightly secure multisignature schemes. The generic construction is derived from the identification (ID) scheme which has two properties called the linearity and the lossiness. Thus, we can obtain new tightly secure multisignature schemes by applying our construction to existing linear and lossy ID schemes. Moreover, we consider the relationship between these two properties to shrink the conditions required for our generic construction. We propose a new property of ID schemes, called the difference soundness, and show that the combination of the linearity and the difference soundness implies the lossiness.

Original languageEnglish
Pages (from-to)1159-1170
Number of pages12
JournalJournal of Internet Technology
Issue number5
Publication statusPublished - 2021


  • Linear identification scheme
  • Lossy identification scheme
  • Multisignature
  • Plain public key model
  • Tight security


Dive into the research topics of 'Linear and lossy identification schemes derive tightly secure multisignatures'. Together they form a unique fingerprint.

Cite this