There were 2 papers published in the last year, that describe 2 different white-box identity-based digital signature schemes:

  1. White-Box Implementation of the Identity-Based Signature Scheme in the IEEE P1363 Standard for Public Key Cryptography. IACR ePrint
  2. White-Box Implementation of Shamir's Identity-Based Signature Scheme. DOI, ResearchGate

I understand how the described algorithms work, but I don't know where white-box signatures could be useful.

In (1), they write:

While there are numerous identity-based signature schemes, they are generally not white-box attack resilience, and we are not aware of any white-box implementation for identity-based signature scheme. Hence, our research has filled the gap in white-box cryptography.


According to the performance evaluation, our proposed method showed that it is potentially useful in the industrial area and the real world applications.

So is it possible that there are no use cases for this yet, but the crypto schemes are implemented just in case someone came up with a use case in the future?

Or is this purely academic prototype showing that it's possible to implement white-box signatures, without necessarily having any real world usage?

P.S. Here is some discussion about asymmetric white-box: Any white-box cryptography for asymmetric-key? What is the latest status of white-box cryptography?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.