## CryptoDB

### Paper: Calamari and Falafl: Logarithmic (Linkable) Ring Signatures from Isogenies and Lattices

Authors: Ward Beullens Shuichi Katsumata Federico Pintore DOI: 10.1007/978-3-030-64834-3_16 Search ePrint Search Google We construct efficient ring signatures (RS) from isogeny and lattice assumptions. Our ring signatures are based on a logarithmic OR proof for group actions. We instantiate this group action by either the CSIDH group action or an MLWE-based group action to obtain our isogeny-based or lattice-based RS scheme, respectively. Even though the OR proof has a binary challenge space and therefore requires a number of repetitions which is linear in the security parameter, the sizes of our ring signatures are small and scale better with the ring size N than previously known post-quantum ring signatures. We also construct linkable ring signatures (LRS) that are almost as efficient as the non-linkable variants. The isogeny-based scheme produces signatures whose size is an order of magnitude smaller than all previously known logarithmic post-quantum ring signatures, but it is relatively slow (e.g. 5.5 KB signatures and 79 s signing time for rings with 8 members). In comparison, the lattice-based construction is much faster, but has larger signatures (e.g. 30 KB signatures and 90 ms signing time for the same ring size). For small ring sizes our lattice-based ring signatures are slightly larger than state-of-the- art schemes, but they are smaller for ring sizes larger than N approximately 1024.
##### BibTeX
@article{asiacrypt-2020-30695,
title={Calamari and Falafl: Logarithmic (Linkable) Ring Signatures from Isogenies and Lattices},
booktitle={Advances in Cryptology - ASIACRYPT 2020},
publisher={Springer},
doi={10.1007/978-3-030-64834-3_16},
author={Ward Beullens and Shuichi Katsumata and Federico Pintore},
year=2020
}