The authors introduce <i>delegatable functional signatures</i> (DFS) which support the delegation of signing capabilities to another party, called the <i>evaluator</i>, with respect to a functionality &#x2131;. In a DFS, the signer of a message can choose an evaluator, specify how the evaluator can modify the signature without voiding its validity, allow additional input, and decide how the evaluator can further delegate its capabilities. Technically, DFS unify several seemingly different signature primitives, including functional signatures and policy-based signatures, sanitisable signatures, identity-based signatures, and blind signatures. The authors characterise the instantiability of DFS with respect to the corresponding security notions of unforgeability and privacy. On the positive side, they show that privacy-free DFS can be constructed from one-way functions. Furthermore, they show that unforgeable and private DFS can be constructed from doubly-enhanced trapdoor permutations. On the negative side, they show that the previous result is optimal regarding its underlying assumptions. Their impossibility result shows that unforgeable private DFS cannot be constructed from one-way permutations.

+More

capabilities technically dfs unforgeable and private dfs ltigtdelegatable functional signaturesltigt dfs security notions doublyenhanced trapdoor of signing capabilities oneway permutations policybased signatures sanitisable

Sebastian MeiserDominique Schröder,.Delegatable functional signatures. 12 (3),194-206.

Sebastian MeiserDominique Schröder,"Delegatable functional signatures" 12

Sebastian MeiserDominique Schröder,"Delegatable functional signatures"