{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T15:12:24Z","timestamp":1780326744024,"version":"3.54.1"},"reference-count":46,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,8,3]],"date-time":"2024-08-03T00:00:00Z","timestamp":1722643200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,8,3]],"date-time":"2024-08-03T00:00:00Z","timestamp":1722643200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072305"],"award-info":[{"award-number":["62072305"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cybersecurity"],"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Since the advent of Bitcoin, cryptocurrencies have gained substantial popularity, and <jats:italic>crypto wallets<\/jats:italic> have evolved into the predominant tool for safeguarding and managing cryptographic keys to access cryptocurrency funds. <jats:italic>Deterministic wallets<\/jats:italic> are proposed as an advanced wallet mechanism to provide benefits such as low-maintenance, easy backup and recovery, and support for functionalities required by cryptocurrencies. Alkeilani\u00a0Alkadri et al. (ACM CCS\u201920) presented the first post-quantum secure deterministic wallet scheme, but it exhibits a gap to bridge before achieving practical applicability, as reflected in both their concrete parameters size and computational efficiency. In this paper, we propose an efficient post-quantum secure deterministic wallet scheme. In particular, we present a new construction method for deterministic wallets, prove the security in the quantum random oracle model, and provide an efficient instantiation. The comparison result, with the work of Alkeilani\u00a0Alkadri et al. (ACM CCS\u201920), shows our work has a comprehensive improvement on efficiency, e.g., the <jats:italic>pk<\/jats:italic> size is <jats:inline-formula><jats:alternatives><jats:tex-math>$$\\approx 40.7$$<\/jats:tex-math><mml:math xmlns:mml=\"http:\/\/www.w3.org\/1998\/Math\/MathML\">\n                  <mml:mrow>\n                    <mml:mo>\u2248<\/mml:mo>\n                    <mml:mn>40.7<\/mml:mn>\n                  <\/mml:mrow>\n                <\/mml:math><\/jats:alternatives><\/jats:inline-formula> times shorter, <jats:italic>sk<\/jats:italic> is <jats:inline-formula><jats:alternatives><jats:tex-math>$$\\approx 9.2$$<\/jats:tex-math><mml:math xmlns:mml=\"http:\/\/www.w3.org\/1998\/Math\/MathML\">\n                  <mml:mrow>\n                    <mml:mo>\u2248<\/mml:mo>\n                    <mml:mn>9.2<\/mml:mn>\n                  <\/mml:mrow>\n                <\/mml:math><\/jats:alternatives><\/jats:inline-formula> times shorter, and the signing time is <jats:inline-formula><jats:alternatives><jats:tex-math>$$\\approx 3.1$$<\/jats:tex-math><mml:math xmlns:mml=\"http:\/\/www.w3.org\/1998\/Math\/MathML\">\n                  <mml:mrow>\n                    <mml:mo>\u2248<\/mml:mo>\n                    <mml:mn>3.1<\/mml:mn>\n                  <\/mml:mrow>\n                <\/mml:math><\/jats:alternatives><\/jats:inline-formula> times faster.<\/jats:p>","DOI":"10.1186\/s42400-024-00216-w","type":"journal-article","created":{"date-parts":[[2024,8,3]],"date-time":"2024-08-03T02:01:56Z","timestamp":1722650516000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Efficient post-quantum secure deterministic wallet scheme"],"prefix":"10.1186","volume":"7","author":[{"given":"Mingxing","family":"Hu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhen","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yunhong","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,8,3]]},"reference":[{"key":"216_CR1","doi-asserted-by":"publisher","unstructured":"Agrawal S, Boneh D, Boyen X (2010a) Efficient lattice (H)IBE in the standard model. In: Gilbert H (ed) Advances in Cryptology - EUROCRYPT 2010, 29th annual international conference on the theory and applications of cryptographic techniques, Monaco\/French Riviera, May 30\u2013June 3, 2010. Proceedings. LNCS, vol 6110, pp 553\u2013572. Springer, Heidelberg. https:\/\/doi.org\/10.1007\/978-3-642-13190-5_28","DOI":"10.1007\/978-3-642-13190-5_28"},{"key":"216_CR2","doi-asserted-by":"publisher","first-page":"98","DOI":"10.1007\/978-3-642-14623-7_6","volume-title":"CRYPTO 2010","author":"S Agrawal","year":"2010","unstructured":"Agrawal S, Boneh D, Boyen X (2010b) Lattice basis delegation in fixed dimension and shorter-ciphertext hierarchical IBE. In: Rabin T (ed) CRYPTO 2010. Springer, Santa Barbara, pp 98\u2013115"},{"key":"216_CR3","doi-asserted-by":"crossref","unstructured":"Ajtai M (1996) Generating hard instances of lattice problems. In: STOC 1996. ACM, Pennsylvania, USA, pp 99\u2013108","DOI":"10.1145\/237814.237838"},{"key":"216_CR4","doi-asserted-by":"crossref","unstructured":"Albrecht MR, Ducas L, Herold G, Kirshanova E, Postlethwaite EW, Stevens M (2019) The general sieve kernel and new records in lattice reduction. In: EUROCRYPT 2019, Darmstadt, Germany. Springer, pp 717\u2013746","DOI":"10.1007\/978-3-030-17656-3_25"},{"key":"216_CR5","doi-asserted-by":"crossref","unstructured":"Alkeilani\u00a0Alkadri N, Das P, Erwig A, Faust S, Kr\u00e4mer J, Riahi S, Struck P (2020) Deterministic wallets in a quantum world. In: CCS 2020. ACM, Gather.town (a virtual platform), pp 1017\u20131031","DOI":"10.1145\/3372297.3423361"},{"key":"216_CR6","first-page":"441","volume-title":"ACNS 2020","author":"E Alkim","year":"2020","unstructured":"Alkim E, Barreto PS, Bindel N, Kr\u00e4mer J, Longa P, Ricardini JE (2020) The lattice-based digital signature scheme qTESLA. In: Conti M, Zhou J, Casalicchio E, Spognardi A (eds) ACNS 2020. Springer, Rome, pp 441\u2013460"},{"key":"216_CR7","unstructured":"Alwen J, Peikert C (2009) Generating shorter bases for hard random lattices. In: Albers S, Marion J (eds) STACS 2009, Freiburg, Germany, pp 75\u201386"},{"key":"216_CR8","doi-asserted-by":"publisher","first-page":"269","DOI":"10.1007\/978-3-030-26951-7_10","volume-title":"CRYPTO 2019","author":"A Ambainis","year":"2019","unstructured":"Ambainis A, Hamburg M, Unruh D (2019) Quantum security proofs using semi-classical oracles. In: Boldyreva A, Micciancio D (eds) CRYPTO 2019. Springer, Santa Barbara, pp 269\u2013295"},{"key":"216_CR9","first-page":"62","volume-title":"CCS 1993","author":"M Bellare","year":"1993","unstructured":"Bellare M, Rogaway P (1993) Random oracles are practical: a paradigm for designing efficient protocols. In: Denning DE, Pyle R, Ganesan R, Sandhu RS, Ashby V (eds) CCS 1993. ACM, Virginia, pp 62\u201373"},{"key":"216_CR10","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1007\/978-3-642-25385-0_3","volume-title":"ASIACRYPT 2011","author":"D Boneh","year":"2011","unstructured":"Boneh D, Dagdelen \u00d6, Fischlin M, Lehmann A, Schaffner C, Zhandry M (2011) Random oracles in a quantum world. In: Lee DH, Wang X (eds) ASIACRYPT 2011. Springer, Seoul, pp 41\u201369"},{"key":"216_CR11","unstructured":"Buterin V (2013) Deterministic Wallets, Their Advantages and Their Understated Flaws, https:\/\/bitcoinmagazine.com\/articles\/deterministic-wallets-advantages-flaw-1385450276"},{"key":"216_CR12","doi-asserted-by":"publisher","first-page":"523","DOI":"10.1007\/978-3-642-13190-5_27","volume-title":"EUROCRYPT 2010","author":"D Cash","year":"2010","unstructured":"Cash D, Hofheinz D, Kiltz E, Peikert C (2010) Bonsai trees, or how to delegate a lattice basis. In: Gilbert H (ed) EUROCRYPT 2010. Springer, Monaco, pp 523\u2013552"},{"key":"216_CR13","doi-asserted-by":"crossref","unstructured":"Chailloux A, Debris-Alazard T (2020) Tight and optimal reductions for signatures based on average trapdoor preimage sampleable functions and applications to code-based signatures. In: PKC 2020. Springer, Virtual, pp 453\u2013479","DOI":"10.1007\/978-3-030-45388-6_16"},{"key":"216_CR14","doi-asserted-by":"crossref","unstructured":"Chen Y, Nguyen PQ (2011) Bkz 2.0: Better lattice security estimates. In: ASIACRYPT 2011, Seoul, South Korea. Springer, pp 1\u201320","DOI":"10.1007\/978-3-642-25385-0_1"},{"key":"216_CR15","doi-asserted-by":"crossref","unstructured":"Das P, Erwig A, Faust S, Loss J, Riahi S (2021) The exact security of BIP32 wallets. In: CCS 2021. ACM, Seoul, South Korea, pp 1020\u20131042","DOI":"10.1145\/3460120.3484807"},{"key":"216_CR16","doi-asserted-by":"crossref","unstructured":"Das P, Faust S, Loss J (2019) A formal treatment of deterministic wallets. In: CCS 2019. ACM, New York, pp 651\u2013668","DOI":"10.1145\/3319535.3354236"},{"key":"216_CR17","doi-asserted-by":"crossref","unstructured":"Di Luzio A, Francati D, Ateniese G (2020) Arcula: A secure hierarchical deterministic wallet for multi-asset blockchains. In: Krenn S, Shulman H, Vaudenay S (eds) CANS 2020. Springer, Virtual, pp 323\u2013343","DOI":"10.1007\/978-3-030-65411-5_16"},{"key":"216_CR18","doi-asserted-by":"crossref","unstructured":"Ducas L, Micciancio D (2014) Improved short lattice signatures in the standard model. In: CRYPTO 2014, Santa Barbara, USA, pp 335\u2013352","DOI":"10.1007\/978-3-662-44371-2_19"},{"key":"216_CR19","doi-asserted-by":"crossref","unstructured":"Erwig A, Riahi S (2022) Deterministic wallets for adaptor signatures. In: ESORICS 2022. Springer, Copenhagen, Denmark, pp 487\u2013506","DOI":"10.1007\/978-3-031-17146-8_24"},{"key":"216_CR20","doi-asserted-by":"publisher","first-page":"245","DOI":"10.1007\/978-3-031-15979-4_9","volume-title":"CRYPTO 2022","author":"T Espitau","year":"2022","unstructured":"Espitau T, Tibouchi M, Wallet A, Yu Y (2022) Shorter hash-and-sign lattice-based signatures. In: Dodis STY (ed) CRYPTO 2022. Springer, Santa Barbara, pp 245\u2013275"},{"issue":"3","key":"216_CR21","doi-asserted-by":"publisher","first-page":"245","DOI":"10.1007\/s10207-019-00476-5","volume":"19","author":"C-I Fan","year":"2020","unstructured":"Fan C-I, Tseng Y-F, Su H-P, Hsu R-H, Kikuchi H (2020) Secure hierarchical bitcoin wallet scheme against privilege escalation attacks. Int J Inf Secur 19(3):245\u2013255","journal-title":"Int J Inf Secur"},{"key":"216_CR22","first-page":"301","volume-title":"PKC 2016","author":"N Fleischhacker","year":"2016","unstructured":"Fleischhacker N, Krupp J, Malavolta G, Schneider J, Schr\u00f6der D, Simkin M (2016) Efficient unlinkable sanitizable signatures from signatures with re-randomizable keys. In: Cheng C, Chung K, Persiano G, Yang B (eds) PKC 2016. Springer, Taipei, pp 301\u2013330"},{"key":"216_CR23","unstructured":"Fouque P-A, Hoffstein J, Kirchner P, Lyubashevsky V, Pornin T, Prest T, Ricosset T, Seiler G, Whyte W, Zhang Z (2018) Falcon: fast-Fourier lattice-based compact signatures over NTRU. Submission to the NIST\u2019s post-quantum cryptography standardization process 36(5)"},{"key":"216_CR24","first-page":"197","volume-title":"STOC 2008, Victoria, British Columbia, Canada, May 17\u201320","author":"C Gentry","year":"2008","unstructured":"Gentry C, Peikert C, Vaikuntanathan V (2008) Trapdoors for hard lattices and new cryptographic constructions. In: Dwork C (ed) STOC 2008, Victoria, British Columbia, Canada, May 17\u201320. ACM, New York, pp 197\u2013206"},{"issue":"2","key":"216_CR25","doi-asserted-by":"publisher","first-page":"281","DOI":"10.1137\/0217017","volume":"17","author":"S Goldwasser","year":"1988","unstructured":"Goldwasser S, Micali S, Rivest RL (1988) A digital signature scheme secure against adaptive chosen-message attacks. SIAM J Comput 17(2):281\u2013308","journal-title":"SIAM J Comput"},{"key":"216_CR26","doi-asserted-by":"crossref","unstructured":"Gutoski G, Stebila D (2015) Hierarchical deterministic bitcoin wallets that tolerate key leakage. In: FC 2015. Springer, Puerto Rico, pp 497\u2013504","DOI":"10.1007\/978-3-662-47854-7_31"},{"key":"216_CR27","doi-asserted-by":"crossref","unstructured":"Hoffstein J, Pipher J, Silverman JH (1998) NTRU: a ring-based public key cryptosystem. In: ANTS 1998. Springer, Heidelberg, pp 267\u2013288","DOI":"10.1007\/BFb0054868"},{"issue":"21","key":"216_CR28","doi-asserted-by":"publisher","first-page":"8744","DOI":"10.3390\/s23218744","volume":"23","author":"S Li","year":"2023","unstructured":"Li S, Chen Y, Chen L, Liao J, Kuang C, Li K, Liang W, Xiong N (2023) Post-quantum security: opportunities and challenges. Sensors 23(21):8744","journal-title":"Sensors"},{"issue":"5","key":"216_CR29","doi-asserted-by":"publisher","first-page":"2934","DOI":"10.1109\/TDSC.2021.3078463","volume":"19","author":"Z Liu","year":"2022","unstructured":"Liu Z, Yang G, Wong DS, Nguyen K, Wang H, Ke X, Liu Y (2022) Secure deterministic wallet and stealth address: key-insulated and privacy-preserving signature scheme with publicly derived public key. IEEE Trans Dependable Secure Comput 19(5):2934","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"216_CR30","doi-asserted-by":"crossref","unstructured":"Liu W, Liu Z, Nguyen K, Yang G, Yu Y (2020) A lattice-based key-insulated and privacy-preserving signature scheme with publicly derived public key. In: ESORICS 2022. Springer, Copenhagen, Denmark, pp 357\u2013377","DOI":"10.1007\/978-3-030-59013-0_18"},{"key":"216_CR31","doi-asserted-by":"crossref","unstructured":"Liu Z, Yang G, Wong DS, Nguyen K, Wang H (2019) Key-insulated and privacy-preserving signature scheme with publicly derived public key. In: EuroS &P 2019. IEEE, Stockholm, Sweden, pp 215\u2013230","DOI":"10.1109\/EuroSP.2019.00025"},{"key":"216_CR32","doi-asserted-by":"publisher","first-page":"598","DOI":"10.1007\/978-3-642-10366-7_35","volume-title":"ASIACRYPT 2009","author":"V Lyubashevsky","year":"2009","unstructured":"Lyubashevsky V (2009) Fiat\u2013Shamir with aborts: applications to lattice and factoring-based signatures. In: Matsui M (ed) ASIACRYPT 2009. Springer, Tokyo, pp 598\u2013616"},{"key":"216_CR33","doi-asserted-by":"publisher","first-page":"738","DOI":"10.1007\/978-3-642-29011-4_43","volume-title":"EUROCRYPT 2012. LNCS","author":"V Lyubashevsky","year":"2012","unstructured":"Lyubashevsky V (2012) Lattice signatures without trapdoors. In: Pointcheval D, Johansson T (eds) EUROCRYPT 2012. LNCS, vol 7237. Springer, Cambridge, pp 738\u2013755"},{"key":"#cr-split#-216_CR34.1","doi-asserted-by":"crossref","unstructured":"Lyubashevsky V, Peikert C, Regev O (2010) On ideal lattices and learning with errors over rings. In: Gilbert H","DOI":"10.1007\/978-3-642-13190-5_1"},{"key":"#cr-split#-216_CR34.2","unstructured":"(ed) EUROCRYPT 2010. Springer, French Riviera, pp 1-23"},{"key":"216_CR35","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4615-0897-7","volume-title":"Complexity of lattice problems: a cryptographic perspective","author":"D Micciancio","year":"2002","unstructured":"Micciancio D, Goldwasser S (2002) Complexity of lattice problems: a cryptographic perspective, vol 671. Kluwer Academic Publishers, Boston"},{"key":"216_CR36","doi-asserted-by":"publisher","first-page":"700","DOI":"10.1007\/978-3-642-29011-4_41","volume-title":"EUROCRYPT 2012","author":"D Micciancio","year":"2012","unstructured":"Micciancio D, Peikert C (2012) Trapdoors for lattices: simpler, tighter, faster, smaller. In: Pointcheval D, Johansson T (eds) EUROCRYPT 2012. Springer, Cambridge, pp 700\u2013718"},{"key":"216_CR37","doi-asserted-by":"crossref","unstructured":"Morita H, Schuldt JC, Matsuda T, Hanaoka G, Iwata T (2015) On the security of the Schnorr signature scheme and DSA against related-key attacks. In: ICISC 2015. Springer, Seoul, South Korea, pp 20\u201335","DOI":"10.1007\/978-3-319-30840-1_2"},{"key":"216_CR38","unstructured":"Nakamoto S (2009) Bitcoin: a peer-to-peer electronic cash system. http:\/\/bitcoin.org\/bitcoin.pdf"},{"key":"216_CR39","unstructured":"NIST (2021) FIPS Pub 186-4 - Digital Signature Standard (DSS), https:\/\/nvlpubs.nist.gov\/nistpubs\/FIPS\/NIST.FIPS.186-4.pdf"},{"issue":"2","key":"216_CR40","doi-asserted-by":"publisher","first-page":"120","DOI":"10.1145\/359340.359342","volume":"21","author":"RL Rivest","year":"1978","unstructured":"Rivest RL, Shamir A, Adleman L (1978) A method for obtaining digital signatures and public-key cryptosystems. Commun ACM 21(2):120\u2013126","journal-title":"Commun ACM"},{"key":"216_CR41","doi-asserted-by":"crossref","unstructured":"Shor PW (1994) Algorithms for quantum computation: discrete logarithms and factoring. In: FOCS 1994. IEEE, Santa Fe, New Mexico, pp 124\u2013134","DOI":"10.1109\/SFCS.1994.365700"},{"issue":"6","key":"216_CR42","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2817206","volume":"62","author":"D Unruh","year":"2015","unstructured":"Unruh D (2015) Revocable quantum timed-release encryption. J ACM 62(6):1\u201376","journal-title":"J ACM"},{"key":"216_CR43","unstructured":"WIKI (2019) Bitcoin wiki transaction format. In: Accessed: 2020-05-04. https:\/\/en.bitcoin.it\/wiki\/Transaction"},{"key":"216_CR44","volume-title":"ESORICS 2022","author":"X Yin","year":"2022","unstructured":"Yin X, Liu Z, Yang G, Chen G, Zhu H (2022) Secure hierarchical deterministic wallet supporting stealth address. In: Atluri V, Di Pietro R, Jensen CD, Meng W (eds) ESORICS 2022. Springer, Copenhagen"},{"issue":"5","key":"216_CR45","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3450745","volume":"68","author":"M Zhandry","year":"2021","unstructured":"Zhandry M (2021) How to construct quantum random functions. J ACM 68(5):1\u201343","journal-title":"J ACM"}],"container-title":["Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-024-00216-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s42400-024-00216-w\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-024-00216-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,3]],"date-time":"2024-08-03T02:05:40Z","timestamp":1722650740000},"score":1,"resource":{"primary":{"URL":"https:\/\/cybersecurity.springeropen.com\/articles\/10.1186\/s42400-024-00216-w"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,8,3]]},"references-count":46,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2024,12]]}},"alternative-id":["216"],"URL":"https:\/\/doi.org\/10.1186\/s42400-024-00216-w","relation":{},"ISSN":["2523-3246"],"issn-type":[{"value":"2523-3246","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,8,3]]},"assertion":[{"value":"6 December 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 January 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 August 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"24"}}