Digital signature batch verification
A computer-implemented method, according to one approach, includes: initializing a one-time digital signature scheme across two or more leaf nodes by: creating and sending instances of the one-time digital signature scheme to the respective leaf nodes. In response to receiving a request for data from a source, where portions of the requested data being stored across the leaf nodes, portions of the data request are distributed to the corresponding leaf nodes. Signed copies of the requested portions of data are further received from the leaf nodes. The received signed copies are formed using the instances sent to the respective leaf nodes. Moreover, the signed copies are sent to the source.
1 . A computer-implemented method (CIM), comprising:
initializing a one-time digital signature scheme across two or more leaf nodes by: creating and sending instances of the one-time digital signature scheme to the respective leaf nodes;
in response to receiving a request for data from a source, portions of the requested data being stored across the leaf nodes, distributing portions of the data request to the corresponding leaf nodes;
receiving, from the leaf nodes, signed copies of the requested portions of data, the signed copies being formed using the instances sent to the respective leaf nodes;
causing the source to combine the signed copies and perform a batch verification of the combined signed copies; and
sending the signed copies to the source.
2 . The CIM of claim 1 , wherein each instance includes a respective pair of public information and private information.
3 . The CIM of claim 2 , wherein each of the signed copies are formed using the private information in the instance sent to the respective leaf node.
4 . The CIM of claim 1 , wherein the operations are performed by a central node of a distributed network, the central node being coupled to the leaf nodes.
5 . The CIM of claim 1 , wherein the initializing of the one-time digital signature scheme across the leaf nodes includes implementing a Merkle tree structure.
6 . The CIM of claim 1 , wherein the signed copies have a consistent length.
7 . The CIM of claim 1 , further comprising:
receiving, from one or more of the leaf nodes, a decoy signed copy along with the respective one of the signed copies; and
sending: an accumulation of the signed copies, and the at least one decoy signed copy, to the source.
8 . The CIM of claim 7 , wherein the decoy copy includes random data that has been signed.
9 . A computer program product (CPP), comprising:
a set of one or more computer-readable storage media; and
program instructions, collectively stored in the set of one or more computer- readable storage media, for causing a processor set to perform the following computer operations:
initialize a one-time digital signature scheme across two or more leaf nodes by: creating and sending instances of the one-time digital signature scheme to the respective leaf nodes;
in response to receiving a request for data from a source, portions of the requested data being stored across the leaf nodes, distribute portions of the data request to the corresponding leaf nodes;
receive, from the leaf nodes, signed copies of the requested portions of data, the signed copies being formed using the instances sent to the respective leaf nodes; and
send an accumulation of the signed copies, and at least one decoy signed copy received from one or more of the leaf nodes, to the source.
10 . The CPP of claim 9 , wherein each instance includes a respective pair of public information and private information.
11 . The CPP of claim 10 , wherein each of the signed copies are formed using the private information in the instance sent to the respective leaf node.
12 . The CPP of claim 9 , wherein the operations are performed by a central node of a distributed network, the central node being coupled to the leaf nodes.
13 . The CPP of claim 10 , wherein the initializing of the one-time digital signature scheme across the leaf nodes includes implementing a Merkle tree structure.
14 . The CPP of claim 9 , wherein the signed copies have a consistent length.
15 . The CPP of claim 9 , wherein the program instructions are for causing the processor set to further perform the following computer operations:
cause the source to combine the signed copies and perform a batch verification of the combined signed copies.
16 . The CPP of claim 9 , wherein the program instructions are for causing the processor set to further perform the following computer operations:
receive, from one or more of the leaf nodes, the decoy signed copy along with the respective one of the signed copies.
17 . The CPP of claim 16 , wherein the decoy copy includes random data that has been signed.
18 . A computer system (CS), comprising:
a processor set;
a set of one or more computer-readable storage media;
program instructions, collectively stored in the set of one or more storage media, for causing the processor set to perform the following computer operations:
initialize a one-time digital signature scheme across two or more leaf nodes by: creating and sending instances of the one-time digital signature scheme to the respective leaf nodes;
in response to receiving a request for data from a source, portions of the requested data being stored across the leaf nodes, distribute portions of the data request to the corresponding leaf nodes;
receive, from the leaf nodes, signed copies of the requested portions of data, the signed copies being formed using the instances sent to the respective leaf nodes; and
send an accumulation of the signed copies, and at least one decoy signed copy received from one or more of the leaf nodes, to the source.
19 . The CS of claim 18 , wherein the program instructions are for causing the processor set to further perform the following computer operations:
receive, from one or more of the leaf nodes, the decoy signed copy along with the respective one of the signed copies
wherein the decoy copy includes random data that has been signed.