{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T23:14:54Z","timestamp":1763507694540,"version":"3.28.0"},"reference-count":61,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014,7]]},"DOI":"10.1109\/csf.2014.19","type":"proceedings-article","created":{"date-parts":[[2014,11,26]],"date-time":"2014-11-26T15:29:10Z","timestamp":1417015750000},"page":"153-165","source":"Crossref","is-referenced-by-count":2,"title":["Certified Synthesis of Efficient Batch Verifiers"],"prefix":"10.1109","author":[{"given":"Joseph A.","family":"Akinyele","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gilles","family":"Barthe","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Benjamin","family":"Gregoire","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Benedikt","family":"Schmidt","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pierre-Yves","family":"Strub","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"crossref","first-page":"870","DOI":"10.1049\/el:19980620","article-title":"batch verifying multiple dsa-type digital signatures","volume":"34","author":"harn","year":"1998","journal-title":"Electronics Letters"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78967-3_24"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00862-7_21"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/100216.100272"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40084-1_8"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-41157-1_11"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1137\/0218012"},{"journal-title":"Zero-knowledge twenty years after its invention","year":"2002","author":"goldreich","key":"ref36"},{"key":"ref35","first-page":"276","article-title":"Batching schnorr identification scheme with applications to privacy-preserving authorization and low-bandwidth communication devices","author":"gennaro","year":"0","journal-title":"Advances in Cryptology - ASIACRYPT volume 3329 of Lecture Notes in Computer Science"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-34805-0_17"},{"key":"ref60","doi-asserted-by":"crossref","first-page":"312","DOI":"10.1007\/3-540-45067-X_27","article-title":"Efficient ID-based blind signature and proxy signature from bilinear pairings","volume":"2727","author":"zhang","year":"0","journal-title":"8th Australasian Conf in Information Security and Privacy (ACISP 2003)"},{"key":"ref61","first-page":"191","article-title":"Efficient verifiably encrypted signature and partially blind signature from bilinear pairings","volume":"2904","author":"zhang","year":"2003","journal-title":"Progress in Cryptology &#x2013; INDOCRYPT '03"},{"key":"ref28","first-page":"499","article-title":"Efficient identity based ring signature","author":"chow","year":"2005","journal-title":"ACNS volume 3531 of LNCS"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2006.207"},{"key":"ref29","doi-asserted-by":"crossref","first-page":"1","DOI":"10.3233\/JCS-2006-14101","article-title":"A survey of algebraic properties used in cryptographic protocols","volume":"14","author":"cortier","year":"2006","journal-title":"Journal of Computer Security"},{"key":"ref2","first-page":"209","article-title":"Structure-preserving signatures and commitments to group elements","author":"abe","year":"2010","journal-title":"Advances in Cryptology - CRYPTO volume 6223 of Lecture Notes in Computer Science"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-34961-4_3"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-72540-4_12"},{"key":"ref22","first-page":"56","article-title":"Signature schemes and anonymous credentials from bilinear maps","author":"camenisch","year":"0","journal-title":"Advances in Cryptology - CRYPTO volume 3152 of Lecture Notes in Computer Science"},{"key":"ref21","first-page":"246","article-title":"Batch verification of short signatures","volume":"4515","author":"camenisch","year":"2007","journal-title":"EUROCRYPT '07"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36594-2_38"},{"key":"ref23","first-page":"138","article-title":"Security analysis of some batch verifying signatures from pairings","volume":"3","author":"cao","year":"2006","journal-title":"International Journal of Network Security"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/11935230_10"},{"key":"ref25","first-page":"18","article-title":"An identity-based signature from gap Diffie-Hellman groups","author":"cha","year":"0","journal-title":"PKC '03 volume 2567 of LNCS"},{"key":"ref50","first-page":"184","article-title":"Pseudonym systems","author":"anna","year":"0","journal-title":"Selected Areas in Cryptography"},{"journal-title":"Secure and practical identity-based encryption","year":"2005","author":"naccache","key":"ref51"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2008.58"},{"key":"ref58","first-page":"233","article-title":"Batch verifications with ID-based signatures","author":"yoon","year":"0","journal-title":"ICISC Lecture Notes in Computer Science"},{"key":"ref57","article-title":"Dual system encryption: Realizing fully secure ibe and hibe under simple assumptions","author":"waters","year":"2009","journal-title":"Cryptology ePrint Archive Report"},{"key":"ref56","first-page":"114","article-title":"Efficient Identity-Based Encryption without random oracles","author":"waters","year":"0","journal-title":"EUROCRYPT '05 Volume 3494 of LNCS"},{"journal-title":"Attacking LCCC batch verification of RSA signatures","year":"2006","author":"stanek","key":"ref55"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30057-8_18"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2012.10"},{"key":"ref52","doi-asserted-by":"crossref","first-page":"77","DOI":"10.1007\/BFb0053426","volume":"950","author":"naccache","year":"1994","journal-title":"Advances in Cryptology - EUROCRYPT '94"},{"key":"ref10","first-page":"71","article-title":"Computer-aided security proofs for the working cryptographer","author":"barthe","year":"0","journal-title":"Advances in Cryptology - CRYPTO 2011 volume of Lecture Notes in Computer Science"},{"key":"ref11","first-page":"236","article-title":"Fast batch verification for modular exponentiation and digital signatures","author":"mihir","year":"1998","journal-title":"EUROCRYPT'98 volume 1403 of LNCS"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1049\/el:19980833"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.1"},{"key":"ref13","first-page":"3","article-title":"Security protocol verification: Symbolic and computational models","author":"blanchet","year":"0","journal-title":"1st International Conference on Principles of Security and Trust POST 2012 volume 7215 of Lecture Notes in Computer Science"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-13708-2_14"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/62212.62222"},{"key":"ref16","first-page":"45","article-title":"Short group signatures","author":"boneh","year":"0","journal-title":"CRYPTO volume 3152 of LNCS"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1137\/S0097539701398521"},{"key":"ref18","first-page":"514","article-title":"Short signatures from the Weil pairing","author":"boneh","year":"2001","journal-title":"ASIACRYPT Volume 2248 of Lecture Notes in Computer Science"},{"key":"ref19","first-page":"58","volume":"1976","year":"2000","journal-title":"Advances in Cryptology - ASIACRYPT?98"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516718"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-013-0057-3"},{"key":"ref6","article-title":"Machine-generated algorithms, proofs and software for the batch verification of digital signature schemes","author":"akinyele","year":"2013","journal-title":"Cryptology EPrint Archive Report 2013\/496"},{"key":"ref5","first-page":"474","article-title":"achine-generated algorithms, proofs and software for the batch verification of digital signature schemes","author":"akinyele","year":"0","journal-title":"ACM CCS'12"},{"key":"ref8","first-page":"488","article-title":"Full proof cryptography: verifiable compilation of efficient zero-knowledge protocols","author":"almeida","year":"0","journal-title":"19th ACM Conference on Computer and Communications Security CCS 2012"},{"key":"ref7","doi-asserted-by":"crossref","first-page":"151","DOI":"10.1007\/978-3-642-15497-3_10","article-title":"A certifying compiler for Zero-Knowledge Proofs of Knowledge based on Sigma-protocols","volume":"6345","author":"almeida","year":"0","journal-title":"Computer Security - ESORICS 2010 15th European Symposium on Research In Computer Security"},{"key":"ref49","doi-asserted-by":"crossref","first-page":"1592","DOI":"10.1049\/el:19941112","article-title":"security of interactive dsa batch verification","volume":"30","author":"lim","year":"1994","journal-title":"Electronics Letters"},{"key":"ref9","article-title":"Fully automated analysis of padding-based encryption in the computational model","author":"barthe","year":"0","journal-title":"ACM Conference on Computer and Communications Security"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-42033-7_1"},{"key":"ref45","first-page":"385","article-title":"A one round protocol for tripartite diffie-hellman","author":"joux","year":"2000","journal-title":"Algorithmic Number Theory ANTS volume 1838 of Lecture Notes in Computer Science"},{"key":"ref48","doi-asserted-by":"crossref","first-page":"957","DOI":"10.1109\/12.392857","article-title":"Improved digital signature suitable for batch verification","volume":"44","author":"chi-sung","year":"1995","journal-title":"IEEE Transactions on Computers"},{"key":"ref47","doi-asserted-by":"crossref","first-page":"999","DOI":"10.3233\/JCS-2009-0388","article-title":"Computationally sound analysis of protocols using bilinear pairings","volume":"18","author":"kremer","year":"2010","journal-title":"Journal of Computer Security"},{"journal-title":"Advances in Cryptology - Eurocrypt","year":"0","author":"hohenberger","key":"ref42"},{"key":"ref41","first-page":"310","article-title":"Efficient identity based signature schemes based on pairings","author":"hess","year":"0","journal-title":"Selected Areas in Cryptography volume 2595 of LNCS"},{"key":"ref44","first-page":"15","article-title":"Cryptanalysis of the batch verifying multiple RSA digital signatures","volume":"11","author":"min-shiang","year":"2000","journal-title":"Informatica Journal of the Lithuanian Academy of Sciences"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45600-7_26"}],"event":{"name":"2014 IEEE 27th Computer Security Foundations Symposium (CSF)","start":{"date-parts":[[2014,7,19]]},"location":"Vienna","end":{"date-parts":[[2014,7,22]]}},"container-title":["2014 IEEE 27th Computer Security Foundations Symposium"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6954678\/6957090\/06957109.pdf?arnumber=6957109","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,23]],"date-time":"2017-06-23T00:59:51Z","timestamp":1498179591000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6957109\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,7]]},"references-count":61,"URL":"https:\/\/doi.org\/10.1109\/csf.2014.19","relation":{},"subject":[],"published":{"date-parts":[[2014,7]]}}}