{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T07:01:11Z","timestamp":1777964471186,"version":"3.51.4"},"reference-count":25,"publisher":"Oxford University Press (OUP)","issue":"5","license":[{"start":{"date-parts":[[2022,2,18]],"date-time":"2022-02-18T00:00:00Z","timestamp":1645142400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/academic.oup.com\/journals\/pages\/open_access\/funder_policies\/chorus\/standard_publication_model"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5,19]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>Two-party signing can be used to provide a high level of key protection especially in the blockchain systems where the safety of money relies on the safety of the signing key. With a two-party signing protocol, the signing key is distributed among two devices, thus the funds are safe as long as one device remains uncorrupted. In this paper, we study the two-party signing protocols for all ISO\/IEC signature standards. The mechanisms based on elliptic curve discrete logarithm in ISO\/IEC can be divided into three types: Schnorr-type, Elliptic Curve Digital Signature Algorithm (ECDSA)-type and SM2-type. There have already been efficient two-party protocols based on Schnorr signature scheme which can be easily extended into all Schnorr-type standards. However, it is particularly hard to construct efficient distributed SM2-type and ECDSA-type protocols due to their nonlinear signing equations. In this paper, we present the first secure and efficient two-party protocol over SM2-type signature standard. We prove its security in the generic group model. We then construct a more efficient two-party ECDSA protocol that is secure in the generic group model and outperforms all previous works.<\/jats:p>","DOI":"10.1093\/comjnl\/bxac001","type":"journal-article","created":{"date-parts":[[2022,1,13]],"date-time":"2022-01-13T12:07:59Z","timestamp":1642075679000},"page":"1111-1125","source":"Crossref","is-referenced-by-count":5,"title":["Two-Party Signing For ISO\/IEC Digital Signature Standards"],"prefix":"10.1093","volume":"66","author":[{"given":"Guofeng","family":"Tang","sequence":"first","affiliation":[{"name":"Trusted Computing and Information Assurance Laboratory , Institute of Software Chinese Academy of Sciences, Beijing 100190 , China"},{"name":"University of Chinese Academy of Sciences , Beijing 100049 , China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhenfeng","family":"Zhang","sequence":"additional","affiliation":[{"name":"Trusted Computing and Information Assurance Laboratory , Institute of Software Chinese Academy of Sciences, Beijing 100190 , China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2022,2,18]]},"reference":[{"key":"2023052000433972500_ref1","first-page":"354","article-title":"Robust threshold DSS signatures","volume-title":"Proceeding of EUROCRYPT 1996, Saragossa, Spain, May 12-16","author":"Gennaro","year":"1996"},{"key":"2023052000433972500_ref2","first-page":"207","article-title":"Practical threshold signatures","volume-title":"Proceeding of EUROCRYPT 2000, Bruges, Belgium, May 14-18","author":"Shoup","year":"2000"},{"key":"2023052000433972500_ref3","first-page":"137","article-title":"Two-party generation of DSA signatures","volume-title":"Proceedings of CRYPTO 2001, Santa Barbara, California, USA, August 19-23","author":"MacKenzie","year":"2001"},{"key":"2023052000433972500_ref4","first-page":"156","article-title":"Threshold-optimal DSA\/ECDSA signatures and an application to bitcoin wallet security","volume-title":"Proceedings of ACNS 2016, Guildford, UK, June 19-22","author":"Gennaro","year":"2016"},{"key":"2023052000433972500_ref5","volume-title":"IT Security techniques \u2013 Digital signatures with appendix \u2013 Part 3: Discrete logarithm based mechanisms","author":"ISO\/IEC 14888-3:2018"},{"key":"2023052000433972500_ref6","first-page":"417","article-title":"Provably secure distributed schnorr signatures and a (t, n) threshold scheme for implicit certificates","volume-title":"Proceedings of ACISP 2001, Sydney, Australia, July 11-13","author":"Stinson","year":"2001"},{"key":"2023052000433972500_ref7","article-title":"Proactive two-party signatures for user authentication","volume-title":"Proceedings of NDSS 2003, San Diego, California, USA, 4-8 August","author":"Nicolosi","year":"2003"},{"key":"2023052000433972500_ref8","first-page":"599","article-title":"A new forward-secure threshold signature scheme based on schnorr cryptosystem","volume-title":"Proceedings of CIS 2007, Harbin, Heilongjiang, China, December 15-19","author":"Cheng","year":"2007"},{"key":"2023052000433972500_ref9","first-page":"223","article-title":"Public-key cryptosystems based on composite degree residuosity classes","volume-title":"Proceeding of EUROCRYPT 1999, Prague, Czech Republic, May 2-6","author":"Paillier","year":"1999"},{"key":"2023052000433972500_ref10","first-page":"613","article-title":"Fast secure two-party ECDSA signing","volume-title":"Proceedings of CRYPTO 2017, Santa Barbara, CA, USA, August 20-24","author":"Lindell","year":"2017"},{"key":"2023052000433972500_ref11","first-page":"1179","article-title":"Fast multiparty threshold ECDSA with fast trustless setup","volume-title":"Proceedings of CCS 2018, Toronto, ON, Canada, October 15-19","author":"Gennaro","year":"2018"},{"key":"2023052000433972500_ref12","first-page":"1837","article-title":"Fast secure multiparty ECDSA with practical distributed key generation and applications to cryptocurrency custody","volume-title":"Proceedings of CCS 2018, Toronto, ON, Canada, October 15-19","author":"Lindell","year":"2018"},{"key":"2023052000433972500_ref13","first-page":"191","article-title":"Two-party ECDSA from hash proof systems and efficient instantiations","volume-title":"Proceedings of CRYPTO 2019, Santa Barbara, CA, USA, August 18-22","author":"Castagnos","year":"2019"},{"key":"2023052000433972500_ref14","first-page":"1769","article-title":"UC non-interactive, proactive, threshold ECDSA with identifiable aborts","volume-title":"Proceedings of CCS 2020, Virtual Event, USA, November 9-13","author":"Canetti","year":"2020"},{"key":"2023052000433972500_ref15","doi-asserted-by":"crossref","first-page":"637","DOI":"10.1145\/3812.3818","article-title":"A randomized protocol for signing contracts","volume":"28","author":"Even","year":"1985","journal-title":"Commun. ACM"},{"key":"2023052000433972500_ref16","first-page":"116","article-title":"Two party RSA key generation","volume-title":"Proceedings of CRYPTO 1999, Santa Barbara, California, USA, August 15-19","author":"Gilboa","year":"1999"},{"key":"2023052000433972500_ref17","first-page":"980","article-title":"Secure two-party threshold ECDSA from ECDSA assumptions","volume-title":"Proceedings of SP 2018, San Francisco, California, USA, 21-23 May","author":"Doerner","year":"2018"},{"key":"2023052000433972500_ref18","first-page":"1051","article-title":"Threshold ECDSA from ECDSA assumptions: The multiparty case","volume-title":"Proceedings of SP 2019, San Francisco, CA, USA, May 19-23","author":"Doerner","year":"2019"},{"key":"2023052000433972500_ref19","first-page":"256","article-title":"Lower bounds for discrete logarithms and related problems","volume-title":"Proceeding of EUROCRYPT 1997, Konstanz, Germany, May 11-15","author":"Shoup","year":"1997"},{"key":"2023052000433972500_ref20","article-title":"FIPS PUB 186-4: Digital Signature Standard (DSS)","volume-title":"FEDERAL INFORMATION PROCESSING STANDARDS PUBLICATION","author":"Kerry","year":"2013"},{"key":"2023052000433972500_ref21","doi-asserted-by":"crossref","first-page":"644","DOI":"10.1109\/TIT.1976.1055638","article-title":"New directions in cryptography","volume":"22","author":"Diffie","year":"1976","journal-title":"IEEE Trans. Inf. Theory"},{"key":"2023052000433972500_ref22","first-page":"546","article-title":"HMQV: A high-performance secure diffie-hellman protocol","volume-title":"Proceedings of CRYPTO 2005, Santa Barbara, California, USA, August 14-18","author":"Krawczyk","year":"2005"},{"key":"2023052000433972500_ref23","doi-asserted-by":"crossref","first-page":"119","DOI":"10.1007\/s10623-003-6154-z","article-title":"Generic groups, collision resistance, and ECDSA","volume":"35","author":"Brown","year":"2005","journal-title":"Des. Codes Cryptogr."},{"key":"2023052000433972500_ref24","first-page":"140","article-title":"Security of the SM2 signature scheme against generalized key substitution attacks","volume-title":"Proceedings of SSR 2015, Tokyo, Japan, December 15-16","author":"Zhang","year":"2015"},{"key":"2023052000433972500_ref25","first-page":"239","article-title":"Efficient identification and signatures for smart cards","volume-title":"Proceedings of CRYPTO 1989, Santa Barbara, California, USA, August 20-24","author":"Schnorr","year":"1989"}],"container-title":["The Computer Journal"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/66\/5\/1111\/50397524\/bxac001.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/66\/5\/1111\/50397524\/bxac001.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,5,20]],"date-time":"2023-05-20T00:44:27Z","timestamp":1684543467000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/comjnl\/article\/66\/5\/1111\/6531895"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,2,18]]},"references-count":25,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2022,2,18]]},"published-print":{"date-parts":[[2023,5,19]]}},"URL":"https:\/\/doi.org\/10.1093\/comjnl\/bxac001","relation":{},"ISSN":["0010-4620","1460-2067"],"issn-type":[{"value":"0010-4620","type":"print"},{"value":"1460-2067","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2023,5]]},"published":{"date-parts":[[2022,2,18]]}}}