Editing Quantum Digital Signature

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
==Functionality==
==Functionality==
Digital Signatures (QDS) allow the exchange of classical messages from sender to multiple recipients, with a guarantee that the signature has come from a genuine sender. Additionally, it comes with the properties of [[Quantum Digital Signature#Properties|transferability]], [[Quantum Digital Signature#Properties|non-repudiation]] and [[Quantum Digital Signature#Properties|unforgeability]]. In contrast, classical digital signatures rely on authentication (taken as an assumption for some QDS protocols) i.e. the message has come from the claimed party; integrity i.e. the message has not been altered (if authentication is confirmed, this property is unforgeability) and non-repudiation (same as QDS). These properties distinguish quantum digital signatures from [[Authentication of Quantum Messages|quantum authentication]]. Quantum messages can be authenticated but not signed [[Quantum Digital Signature#References|(1), (2)]]. Note that QDS schemes sign classical messages and not quantum messages. <br/>
Digital Signatures (DS) allow for the exchange of single or multiple bit classical messages from sender to multiple recipients, with a guarantee that the signature has come from a genuine sender and the properties of transferability, non-repudiation and unforgeability (see [[Properties]]).


'''Tags:'''  [[:Category: Multi Party Protocols|Multi Party (three)]],  [[:Category: Quantum Enhanced Classical Functionality|Quantum Enhanced Classical Functionality]],  [[:Category: Specific Task|Specific Task]]
==Protocols==
[[Category: Multi Party Protocols]]  [[Category: Quantum Enhanced Classical Functionality]] [[Category:Specific Task]]
For simlicity, most protocols use the case of three parties, one sender (Seller) and two recipients (Buyer and Verifier) exchanging one-bit classical messages signed by Quantum Digital Signatures (QDS).  


==Use-cases==
*[[Quantum Digital Signature with Quantum Memory]]
* Classical task
*[[Prepare and Measure Quantum Digital Signature]]
* Classical analogue: RSA, Post-Quantum Secure analogue: XMSS
*[[Measurement Device Independent Quantum Digital Signature (MDI-QDS)]]
*QDS implementation specifications (best achieved) per half bit message (0 or 1):
** best estimated time: 3.5 secs
**key length: 2Mbits
** maximum transmission distance: 200 kms
** scalability: linear in time, not linear in key length
* [[New threat models on authentication]]
* [[Cross-platform finance]]


==Protocols==
==Use Case==
Signing e-Marksheet, Financial Transactions, Software Distribution, Cryptocurrencies, e-voting


*[[Gottesman and Chuang Quantum Digital Signature]]: [[:Category: Quantum Memory Network Stage|Quantum Memory Network Stage]]
Tags: [[Multi Party Protocols|Multi Party]], [[Quantum Enhanced Classical Functionality]], [[Specific Task]], [[Blind Quantum Digital Signature]], [[Arbitrated Signature]], [[Quantum Proxy Signature]], [[Designated Verifiable Quantum Signature]], [[Limited Delegation of Quantum Signature]]
*[[Prepare and Measure Quantum Digital Signature]]: [[:Category: Prepare and Measure Network Stage|Prepare and Measure Network Stage]]
*[[Measurement Device Independent Quantum Digital Signature (MDI-QDS)]]: [[:Category: Prepare and Measure Network Stage|Prepare and Measure Network Stage]]
*[[Arbitrated Quantum Digital Signature]]: [[:Category: Quantum Memory Network Stage|Quantum Memory Network Stage]]
Below are few signature protocols with slightly modified functionality but same properties and requirements.
*[[Blind Delegation of Quantum Digital Signature]]
*[[Designated Verifiable Quantum Signature]]
*[[Limited Delegation of Quantum Signature]]
*[[Quantum Proxy Signature]]


==Properties==
==Properties==
All QDS protocols are divided into two phases, distribution and messaging. Distribution phase enables sender to generate private keys (kept secret with sender) and public keys (information distributed to recipients) while messaging phase enables exchange of messages using the above keys. For simplicity, most protocols use the case of three parties, one sender (Seller) and two recipients (Buyer and Verifier) exchanging one-bit classical messages signed by Quantum Digital Signatures (QDS). 
All QDS protocols are divided into two phases, distribution and messaging. Distribution phase enables sender to generate private keys (kept secret with sender) and public keys (distributed to recipients) while messaging phase enables exchange of messages using the above keys.
 
*A QDS scheme is correct if a message signed by a genuine sender is accepted by a recipient with unit probability.
*A QDS scheme is correct if a message signed by a genuine sender is accepted by a recipient with unit probability.
*A QDS scheme is secure if no one but the sender can sign a message such that it is accepted by a recipient with non-negligible probability.  
*A QDS scheme is secure if no one but the sender can sign a message such that it is accepted by a recipient with non-negligible probability.  
Line 37: Line 22:
*'''Non-Repudiation''' implies that at any point a dishonest sender (seller) cannot deny having signed the message sent to a genuine recipient (Buyer).
*'''Non-Repudiation''' implies that at any point a dishonest sender (seller) cannot deny having signed the message sent to a genuine recipient (Buyer).


==Further Information==
==Discussion==
Unlike classical digital signature schemes which generalize a two party model, QDS protocols always study a three party model as transferability is not inherent and has to be proved in the quantum case. Given this situation, usually, the third party acts as the judge (a verififer) who would gain nothing out of cheating, and hence, cheating strategy is only studied for seller (repudiation) and buyer (forgery). Quantum digital signatures provide unconditional security, not relying on any computational assumption which is its basic advantage over the classical schemes. However, over time classical unconditionally secure digital signature schemes have been realized. These classical protocols take extra some assumptions like trusted omnipotent (one who distributes everyone signatures) or authenticated message broadcast. QDS does not require any such assumption. Yet, the low key rate could render QDS impractical over classical digital signature schemes. At the same time, there exist post quantum secure Digital signature schemes based on hash-key cryptography which cannot be broken by quantum computers.  Still, if someone requires a lifetime security without the above mentioned assumptions, QDS is the answer. Areas to improve QDS could be addressing the key rate and scalability of key length with length of message. Following are a few articles useful for those interested in a more detailed overview of QDS. 
(Review Paper by Petros)
 
[[Category:Multi Party Protocols]]
==Knowledge Graph==
{{graph}}
 
*Review Papers
#[https://www.semanticscholar.org/paper/Unconditionally-Secure-Quantum-Signatures-Amiri-Andersson/2c9a298c9e902c5162496cc13f5d560427873412 AA (2015)] Discusses various classical and quantum digital signature schemes
#Wallden P. (2018) (In preparation): Discusses the development of Quantum Digital Signatures from the first protocol by Gottesman and Chuang, elaborating advancements in further protocols to turn it into a practical QDS scheme.
==References==
#[https://arxiv.org/abs/quant-ph/0205128 Barum et al (2002)] First intuition towards impossibility of signing quantum states
#[https://arxiv.org/abs/1302.4528 Li et al (2013)] Discusses the possibility of arbitrated Quantum Signature schemes for quantum signatures
#[https://eprint.iacr.org/2018/1164 Alagic et al (2018)] Impossibility result of signing quantum states established and the article rules out all weak schemes for quantum messages
 
 
<div style='text-align: right;'>''contributed by Shraddha Singh''</div>
Please note that all contributions to Quantum Protocol Zoo may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see Quantum Protocol Zoo:Copyrights for details). Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following CAPTCHA:

Cancel Editing help (opens in new window)

Template used on this page:

Retrieved from "https://wiki.veriqloud.fr/index.php?title=Quantum_Digital_Signature"