{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,8]],"date-time":"2026-01-08T16:05:56Z","timestamp":1767888356219,"version":"3.49.0"},"reference-count":13,"publisher":"Wiley","license":[{"start":{"date-parts":[[2018,9,23]],"date-time":"2018-09-23T00:00:00Z","timestamp":1537660800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Priority Research Centers Program of the Ministry of Education","award":["2009-0093827"],"award-info":[{"award-number":["2009-0093827"]}]},{"name":"Priority Research Centers Program of the Ministry of Education","award":["2016R1D1A1B01008562"],"award-info":[{"award-number":["2016R1D1A1B01008562"]}]},{"DOI":"10.13039\/501100003621","name":"Ministry of Science, ICT and Future Planning","doi-asserted-by":"publisher","award":["2009-0093827"],"award-info":[{"award-number":["2009-0093827"]}],"id":[{"id":"10.13039\/501100003621","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003621","name":"Ministry of Science, ICT and Future Planning","doi-asserted-by":"publisher","award":["2016R1D1A1B01008562"],"award-info":[{"award-number":["2016R1D1A1B01008562"]}],"id":[{"id":"10.13039\/501100003621","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2018,9,23]]},"abstract":"<jats:p>The notion of key substitution security on digital signatures in the multiuser setting has been proposed by Menezes and Smart in 2004. Along with the unforgeability of signature, the key substitution security is very important since it is a critical requirement for the nonrepudiation and the authentication of the signature. Lattice-based signature is a promising candidate for post-quantum cryptography, and the unforgeability of each scheme has been relatively well studied. In this paper, we present key substitution attacks on BLISS, Lyubashevsky\u2019s signature scheme, and GPV and thus show that these signature schemes do not provide nonrepudiation. We also suggest how to avoid key substitution attack on these schemes.<\/jats:p>","DOI":"10.1155\/2018\/8525163","type":"journal-article","created":{"date-parts":[[2018,9,23]],"date-time":"2018-09-23T19:31:21Z","timestamp":1537731081000},"page":"1-13","source":"Crossref","is-referenced-by-count":3,"title":["Key Substitution Attacks on Lattice Signature Schemes Based on SIS Problem"],"prefix":"10.1155","volume":"2018","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7442-6117","authenticated-orcid":true,"given":"Youngjoo","family":"An","sequence":"first","affiliation":[{"name":"Department of Mathematics, Ewha Womans University, Seoul 120-750, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hyang-Sook","family":"Lee","sequence":"additional","affiliation":[{"name":"Department of Mathematics, Ewha Womans University, Seoul 120-750, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Juhee","family":"Lee","sequence":"additional","affiliation":[{"name":"Institute of Mathematical Sciences, Ewha Womans University, Seoul 120-750, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1192-6672","authenticated-orcid":true,"given":"Seongan","family":"Lim","sequence":"additional","affiliation":[{"name":"Institute of Mathematical Sciences, Ewha Womans University, Seoul 120-750, Republic of Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"11","doi-asserted-by":"publisher","DOI":"10.3934\/amc.2013.7.1"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1023\/B:DESI.0000036250.18062.3f"},{"key":"19","volume":"186","year":"1994"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29011-4_43"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40041-4_3"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1093\/ietfec\/E88-A.2.611"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-005-0071-2"},{"key":"3","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-49162-7_12"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1137\/S0097539705447360"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89255-7_23"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36362-7_8"},{"key":"14","first-page":"54","volume":"5086","year":"2008","journal-title":"Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics): Preface"},{"key":"2","first-page":"759","year":"2017","journal-title":"Cryptology ePrint Archive, Report 2017"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2018\/8525163.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2018\/8525163.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2018\/8525163.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2018,9,23]],"date-time":"2018-09-23T19:31:23Z","timestamp":1537731083000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2018\/8525163\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,9,23]]},"references-count":13,"alternative-id":["8525163","8525163"],"URL":"https:\/\/doi.org\/10.1155\/2018\/8525163","relation":{},"ISSN":["1939-0114","1939-0122"],"issn-type":[{"value":"1939-0114","type":"print"},{"value":"1939-0122","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,9,23]]}}}