A storage efficient redactable signature in the standard model

Abstract

In this paper, we propose a simple redactable signature scheme for super-sets whose message-signature size is O(|M|+τ), where τ is a security parameter and M is a message to be signed. The scheme proposed by Johnson et al. in CT-RSA 2003 has the similar performance but this scheme was proven secure based on the RSA assumption in the random oracle model. In this paper, we show that such a scheme can be constructed based on the RSA assumption without the random oracles. © 2009 Springer Berlin Heidelberg.