At the moment I am trying to find a practical way to implement a linearly homomorphic signature.
"In a homomorphic signature scheme, a user Alice signs some large dataset x using her secret signing key and uploads the signed data to an untrusted remote server. The server can then run some computation y=f(x) over the signed data and homomorphically derive a short signature σf,y certifying that y is the correct output of the computation f. Anybody can verify the tuple (f,y,σf,y) using Alice's public verification key and become convinced of this fact without having to retrieve the entire underlying data."
At the moment I can't find anything in the literature, but it seems like it should be possible to implement a homomorphic signature using homomorphic encryption. Specifically, I want to use Microsoft SEAL to do this.
It looks like it should be possible (and quite simple) to implement all the required components of a linearly homomorphic signature using microsoft SEAL. Does anyone know if this is possible?