Full Domain Hash
From Wikipedia, the free encyclopedia
In cryptography, the Full Domain Hash (FDH) is an RSA-based signature scheme that follows the hash-and-sign paradigm. It is provably secure (i.e, is existentially unforgeable under adaptive chosen-message attacks) in the random oracle model. FDH involves hashing a message using a function whose image size equals the size of the RSA modulus, and then raising the result to the secret RSA exponent.
[edit] Exact security of full domain hash
In the random oracle model, if RSA is (t',ε')-secure, then the full domain hash RSA signature scheme is (t,ε)-secure where, 
and 
.
For large qsig this boils down to 
.
This means that if there exists an algorithm that can forge a new FDH signature that runs in time t, computes at most qhash hashes, asks for at most qsig signatures and succeeds with probability ε, then there must also exist an algorithm that breaks RSA with probability ε' in time t'.
[edit] References
- Mihir Bellare, Phillip Rogaway: The Exact Security of Digital Signatures - How to Sign with RSA and Rabin. EUROCRYPT 1996: pp399–416 (PDF)
 |
This cryptography-related article is a stub. You can help Wikipedia by expanding it. |
