[Resource Topic] 2021/866: The One-More Discrete Logarithm Assumption in the Generic Group Model

Welcome to the resource topic for 2021/866

Title:
The One-More Discrete Logarithm Assumption in the Generic Group Model

Authors: Balthazar Bauer, Georg Fuchsbauer, Antoine Plouviez

Abstract:

The one more-discrete logarithm assumption (OMDL) underlies the security analysis of identification protocols, blind signature and multi-signature schemes, such as blind Schnorr signatures and the recent MuSig2 multi-signatures. As these schemes produce standard Schnorr signatures, they are compatible with existing systems, e.g. in the context of blockchains. OMDL is moreover assumed for many results on the impossibility of certain security reductions. Despite its wide use, surprisingly, OMDL is lacking any rigorous analysis; there is not even a proof that it holds in the generic group model (GGM). (We show that a claimed proof is flawed.) In this work we give a formal proof of OMDL in the GGM. We also prove a related assumption, the one-more computational Diffie-Hellman assumption, in the GGM. Our proofs deviate from prior proofs in the GGM and replace the use of the Schwartz-Zippel Lemma by a new argument.

ePrint: https://eprint.iacr.org/2021/866

Talk: https://www.youtube.com/watch?v=kz7w4nKVdYU

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .