Is Lamport's One Time Signature used as a primitive to construct any other cryptographic protocols?


2 Answers 2


I don't know of a use of Lamport's scheme precisely as Lamport originally published it; however if we include generalizations of the idea (such as Winternitz signatures), then it has been used as the basis of Hash Based Signatures, such as this proposal

  • $\begingroup$ thanks, this helps.. if i don't get any other answers, i will close the question with this answer. $\endgroup$
    – Subhayan
    Commented Apr 27, 2015 at 3:31

Two caveats:

  1. Lamport itself isn't fundamental; it's just the prototypical example of a one-way signature.
  2. A one-way signature isn't a "primitive" any more than an RSA signature is; it might be more accurate to describe it as a "building block".

However, yes, one-time signatures are a keystone operation in Lu, Au, and Zhang's 2019 Linkable Ring Signature scheme.

(Ring Signatures allow users to sign a message as an anonymous member of a set of users; Linkable Ring Signatures allow multiple such signatures by the same anonymous signer to be shown to be such.)


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.