π€ AI Summary
Existing traceable signature schemes rely on number-theoretic or pairing-based assumptions, rendering them vulnerable to quantum attacks.
Method: This paper constructs the first lattice-based traceable signature scheme, founded on the Short Integer Solution (SIS) problem. It provides rigorous security proofs in the Quantum Random Oracle Model (QROM) for correctness, anonymity, unforgeability, and traceability. To reconcile user anonymity with regulated identity tracing, the scheme integrates an efficient zero-knowledge proof protocol.
Contribution/Results: This work presents the first provably secure lattice-based traceable signature construction. It advances traceable signatures from classical cryptographic paradigms to quantum-resistant foundations, thereby establishing both theoretical guarantees and practical building blocks for post-quantum anonymous authentication systems.
π Abstract
Traceable signatures (Kiayas et al., EUROCRYPT 2004) is an anonymous digital signature system that extends the tracing power of the opening authority in group signatures. There are many known constructions of traceable signatures, but all are based on number-theoretic/pairing assumptions. For such reason, they may not be secure in the presence of quantum computers. This work revisits the notion of traceable signatures and presents a lattice-based construction provably secure in the quantum random oracle model (QROM).