Sven Schäge

On the Impossibility of Short Algebraic Signatures.

2021 · IACR Cryptology ePrint Archive

The existence of one-way functions implies secure digital signatures, but not public-key encryption (at least in a black-box setting). Somewhat surprisingly, though, efficient public-key encryption schemes appear to be much easier to construct from concrete …