SYSTEMS, DEVICES, AND METHODS FOR DETECTING DOUBLE SIGNING IN A ONE-TIME USE SIGNATURE SCHEME

摘要

Embodiments relate to systems, devices, and computer-implemented methods for detecting double signing in one-time use signature schemes by receiving a first message, where the first message includes a signature generated using a one-time use private key of a one-time use public/private key pair, determining a one-time use public key of the public/private key pair based on the first message, adding the one-time use public key to a list of public keys, receiving a second message, where the second message includes a signature generated using the one-time use private key of the one-time use public/private key pair, determining the one-time use public key of the public/private key pair based on the second message, determining that the one-time use public/private key pair was used more than once based on the list of public keys; and generating an alert based on determining that the one-time use public/private key pair was used more than once.

主权项

1. A system comprising:
a processing system of a device comprising one or more processors; and a memory system comprising one or more computer-readable media, wherein the one or more computer-readable media contain instructions that, when executed by the processing system, cause the processing system to perform operations comprising:
receiving a message, wherein the message comprises a signature generated using a one-time use private key of a hash-based one-time use public/private key pair;determining a one-time use public key of the hash-based one-time public/private key pair based on the message;determining that the hash-based one-time use public/private key pair was used more than once by comparing the one-time use public key to a list of public keys;generating an alert based on determining that the hash-based one-time use public/private key pair was used more than once; andforging a signature associated with the one-time use private key based on the message and a previous message signed using the one-time use private key.