Short Lattice Signature Scheme with Tighter Reduction under Ring-SIS Assumption

We propose a short signature scheme under the ring-SIS assumption in standard model. Specifically, by revisiting an existing construction [Ducas and Micciancio, CRYPTO 2014], we demonstrate lattice-based signatures with improved reduction loss. As far as know, there are no ways to use multiple tags simulation of security proof lattice tag-based signatures. address tag-collision possibility setting, which improves Our generates from messages constructing mild condition that is existentially unforgeable against random message attack auxiliary information. Thus our can reduce size since it does not need send has sizes O(1) achieves tighter loss than Ducas et al.'s scheme. proposed two variants. one property same verification key O(log n) scheme, where n parameter. other much O(Q/n) O(n), Q number signing queries.