crypto.graphics

Digital Signature Security Game

{genKeys, Sign, Verify} is the candidate signature scheme.

	sk, pk = genKeys()
i++	m_i	←	m_i ∈ Inputs
i++	t_i = Sign(sk, m_i)	→	t_i
			(m^, t^) ∈ Outputs: (∀ i) m^* ≠ m_i
			(m^, t^) ↓

Advantage

Advantage(Adversary) = Pr[Verify(pk, m^*, t^*) accepts the tag as valid]

Correctness

(∀ m) Pr[(sk, pk) ← genKeys(), Verify(pk, m, Sign(sk, m)) == accept ] == 1