… scheme for scalars [19]. To avoid using non-falsifiable assumptions in this case, one can use
a DL-extractable commitment scheme … ) of a DL-extractable commitment scheme. Intuitively, …

… Consequently, assuming point compression is used in both schemes, the commitment
and opening size of the UC-commitment in [2] is 1799 and 512 bits respectively. Our UC-secure …

… DL-extractable UC-commitment schemes. In ACNS 2019, volume 11464 of LNCS, pages …
commitments and propose a new scheme called DL-extractable commitment that allows one to …

… [1] recently proposed a discrete logarithm extractable (DL-extractable) UC-commitment
scheme. Differently from the usual UC-commitment, a committer will open the commitment to \([m]…

… 19a] recently proposed a discrete logarithm extractable (DL-extractable) UC-commitment
scheme. Differently from the usual UC-commitment, a committer will open the commitment to [m]…

… DL-extractable and equivocable commitment scheme for vectors, which may be of independent
interest. It is based on two commitment schemes (… a DLextractable UC commitment [50] in …

… scheme, called DUBI, based on the blockchain technology and zero-knowledge proof. In our
scheme, a … 1) We propose DUBI, a fully decentralized UBI scheme based on the blockchain …

… al.’s protocol which avoids the ROM by using a DL-extractable UC-commitment [ABL+19a]. …
_{i, r}\) with a UC-secure DL-extractable commitment scheme. This is followed by an opening …

… We also propose a new commitment scheme using the RSA-polynomial problem. The
proposed scheme outperforms the previous commitment schemes and is free of any group-…

… In this paper, we propose a universally composable authentication and handover scheme
with strong user privacy support, where each MVNO user can validate a mobile operator (MNO…