Table of Contents
Fetching ...

Blockchain-Envisioned Post-Quantum Secure Sanitizable Signature for Audit Logs Management

Vikas Srivastava, Paresh Baidya, Sihem Mesnager, Debasish Roy, Sumit Kumar Debnath

TL;DR

This work presents the first post-quantum secure multivariate-based SSS, namely Mul-SAN, which presents itself as a practical method to partially delegate control of the authenticated data in avenues like the healthcare industry and government organizations and uses Blockchain to provide a tamper-proof and robust audit log mechanism.

Abstract

Audit logs are one of the most important tools for transparently tracking system events and maintaining continuous oversight in corporate organizations and enterprise business systems. There are many cases where the audit logs contain sensitive data, or the audit logs are enormous. In these situations, dealing with a subset of the data is more practical than the entire data set. To provide a secure solution to handle these issues, a sanitizable signature scheme (SSS) is a viable cryptographic primitive. Herein, we first present the first post-quantum secure multivariate-based SSS, namely Mul-SAN. Our proposed design provides unforgeability, privacy, immutability, signer accountability, and sanitizer accountability under the assumption that the MQ problem is NP-hard. Mul-SAN is very efficient and only requires computing field multiplications and additions over a finite field for its implementation. Mul-SAN presents itself as a practical method to partially delegate control of the authenticated data in avenues like the healthcare industry and government organizations. We also explore using Blockchain to provide a tamper-proof and robust audit log mechanism.

Blockchain-Envisioned Post-Quantum Secure Sanitizable Signature for Audit Logs Management

TL;DR

This work presents the first post-quantum secure multivariate-based SSS, namely Mul-SAN, which presents itself as a practical method to partially delegate control of the authenticated data in avenues like the healthcare industry and government organizations and uses Blockchain to provide a tamper-proof and robust audit log mechanism.

Abstract

Audit logs are one of the most important tools for transparently tracking system events and maintaining continuous oversight in corporate organizations and enterprise business systems. There are many cases where the audit logs contain sensitive data, or the audit logs are enormous. In these situations, dealing with a subset of the data is more practical than the entire data set. To provide a secure solution to handle these issues, a sanitizable signature scheme (SSS) is a viable cryptographic primitive. Herein, we first present the first post-quantum secure multivariate-based SSS, namely Mul-SAN. Our proposed design provides unforgeability, privacy, immutability, signer accountability, and sanitizer accountability under the assumption that the MQ problem is NP-hard. Mul-SAN is very efficient and only requires computing field multiplications and additions over a finite field for its implementation. Mul-SAN presents itself as a practical method to partially delegate control of the authenticated data in avenues like the healthcare industry and government organizations. We also explore using Blockchain to provide a tamper-proof and robust audit log mechanism.
Paper Structure (15 sections, 5 theorems, 3 equations, 6 figures, 2 tables)

This paper contains 15 sections, 5 theorems, 3 equations, 6 figures, 2 tables.

Key Result

Theorem 1

If the underlying MQ-based signature employed in the design and construction of Mul-SAN is unforgeable, the proposed sanitizable signature scheme Mul-SAN is immutable.

Figures (6)

  • Figure 1: Sanitizable signature scheme. Fixed parts of the message are highlighted in blue.
  • Figure 2: Signer Accountability of SSS
  • Figure 3: Sanitizer Accountability of SSS
  • Figure 4: Immutability of SSS
  • Figure 5: Unforgeability of SSS
  • ...and 1 more figures

Theorems & Definitions (16)

  • Definition 1
  • Definition 2
  • Definition 3
  • Definition 4
  • Definition 5
  • Remark 1
  • Theorem 1
  • Proof 1
  • Theorem 2
  • Proof 2
  • ...and 6 more