cispa_all_4002.pdf (783.74 kB)

Chopsticks: Fork-Free Two-Round Multi-Signatures from Non-Interactive Assumptions

Download (783.74 kB)
conference contribution
posted on 2024-03-05, 12:19 authored by Pan, Jiaxin, Benedikt WagnerBenedikt Wagner
Multi-signatures have been drawing lots of attention in recent years, due to their applications in cryptocurrencies. Most early constructions require three-round signing, and recent constructions have managed to reduce the round complexity to two. However, their security proofs are mostly based on non-standard, interactive assumptions (e.g. one-more assumptions) and come with a huge security loss, due to multiple uses of rewinding (aka the Forking Lemma). This renders the quantitative guarantees given by the security proof useless. In this work, we improve the state of the art by proposing two efficient two-round multi-signature schemes from the (standard, non-interactive) Decisional Diffie-Hellman (DDH) assumption. Both schemes are proven secure in the random oracle model without rewinding. We do not require any pairing either. Our first scheme supports key aggregation but has a security loss linear in the number of signing queries, and our second scheme is the first tightly secure construction. A key ingredient in our constructions is a new homomorphic dual-mode commitment scheme for group elements, that allows to equivocate for messages of a certain structure. The definition and efficient construction of this commitment scheme is of independent interest.


Preferred Citation

Jiaxin Pan, Benedikt Wagner. Chopsticks: Fork-Free Two-Round Multi-Signatures from Non-Interactive Assumptions. In: Advances in Cryptology – EUROCRYPT 2023. 2023.

Primary Research Area

  • Algorithmic Foundations and Cryptography

Name of Conference

Advances in Cryptology – EUROCRYPT 2023

Legacy Posted Date


Open Access Type

  • Repository


@inproceedings{cispa_all_4002, author = {Jiaxin Pan AND Benedikt Wagner}, title = {Chopsticks: Fork-Free Two-Round Multi-Signatures from Non-Interactive Assumptions}, booktitle = {Advances in Cryptology – EUROCRYPT 2023}, year = {2023} }

Usage metrics


    No categories selected



    Ref. manager