eprint.iacr.org New Post-Quantum Blind Signatures Using VOLE-in-the-Head Protocols
Article Content
- •PoMFRIT is a new blind signature scheme based on VOLE-in-the-head proofs.
- •The scheme achieves significant efficiency improvements over existing methods.
- •No active exploitation or vulnerabilities related to this research have been reported.
Research from the Technical University of Denmark introduces PoMFRIT, a blind signature scheme leveraging the VOLE-in-the-head zero-knowledge proof system. This scheme aims to enhance efficiency in privacy-preserving applications, achieving a communication size of 0.45 KB and signature size of 6.7 KB. The prover time for showing a blind signature is under 76 ms, even for conservative constructions with 128-bit security. The work builds on Baum et al.'s earlier findings on VOLE-in-the-head protocols, which are designed to be post-quantum secure. The implementation demonstrates significant performance improvements over existing lattice-based blind signatures, which typically require over 20 KB of communication and more than 100 ms of prover time. The research is significant for applications in anonymous credentials and e-cash schemes, although no or vulnerabilities have been reported.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What is PoMFRIT?
How does PoMFRIT compare to existing blind signatures?
Is there any known exploitation of these protocols?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…