TY - GEN
T1 - Achieving optimal anonymity in transferable e-cash with a judge
AU - Blazy, Olivier
AU - Canard, Sébastien
AU - Fuchsbauer, Georg
AU - Gouget, Aline
AU - Sibert, Hervé
AU - Traoré, Jacques
PY - 2011/7/13
Y1 - 2011/7/13
N2 - Electronic cash (e-cash) refers to money exchanged electronically. The main features of traditional cash are usually considered desirable also in the context of e-cash. One such property is off-line transferability, meaning the recipient of a coin in a transaction can transfer it in a later payment transaction to a third person without contacting a central authority. Among security properties, the anonymity of the payer in such transactions has been widely studied. This paper proposes the first efficient and secure transferable e-cash scheme with the strongest achievable anonymity properties, introduced by Canard and Gouget. In particular, it should not be possible for adversaries who receive a coin to decide whether they have owned that coin before. Our proposal is based on two recent cryptographic primitives: the proof system by Groth and Sahai, whose randomizability enables strong anonymity, and the commuting signatures by Fuchsbauer, which allow one to sign values that are only given as encryptions.
AB - Electronic cash (e-cash) refers to money exchanged electronically. The main features of traditional cash are usually considered desirable also in the context of e-cash. One such property is off-line transferability, meaning the recipient of a coin in a transaction can transfer it in a later payment transaction to a third person without contacting a central authority. Among security properties, the anonymity of the payer in such transactions has been widely studied. This paper proposes the first efficient and secure transferable e-cash scheme with the strongest achievable anonymity properties, introduced by Canard and Gouget. In particular, it should not be possible for adversaries who receive a coin to decide whether they have owned that coin before. Our proposal is based on two recent cryptographic primitives: the proof system by Groth and Sahai, whose randomizability enables strong anonymity, and the commuting signatures by Fuchsbauer, which allow one to sign values that are only given as encryptions.
KW - Groth-Sahai proofs
KW - Transferable e-cash
KW - anonymity
KW - commuting signatures
UR - https://www.scopus.com/pages/publications/79960104743
U2 - 10.1007/978-3-642-21969-6_13
DO - 10.1007/978-3-642-21969-6_13
M3 - Conference contribution
AN - SCOPUS:79960104743
SN - 9783642219689
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 206
EP - 223
BT - Progress in Cryptology, AFRICACRYPT 2011 - 4th International Conference on Cryptology in Africa, Proceedings
T2 - 4th International Conference on the Theory and Application of Cryptographic Techniques, AFRICACRYPT 2011
Y2 - 5 July 2011 through 7 July 2011
ER -