Systems, devices, and methods for detecting double signing in a one-time use signature scheme
Embodiments relate to systems, devices, and computer-implemented methods for detecting double signing in one-time use signature schemes by receiving a first message, where the first message includes a signature generated using a one-time use private key of a one-time use public/private key pair, determining a one-time use public key of the public/private key pair based on the first message, adding the one-time use public key to a list of public keys, receiving a second message, where the second message includes a signature generated using the one-time use private key of the one-time use public/private key pair, determining the one-time use public key of the public/private key pair based on the second message, determining that the one-time use public/private key pair was used more than once based on the list of public keys; and generating an alert based on determining that the one-time use public/private key pair was used more than once.
1. A system comprising:
a processing system of a device comprising one or more processors; and
a memory system comprising one or more computer-readable media, wherein the one or more computer-readable media contain instructions that, when executed by the processing system, cause the processing system to perform operations comprising:
receiving a message, wherein the message comprises a signature generated using a one-time use private key of a hash-based one-time use public/private key pair;
determining a one-time use public key of the hash-based one-time public/private key pair based on the message;
determining that the hash-based one-time use public/private key pair was used more than once by comparing the one-time use public key to a list of public keys associated with previously received messages, wherein the list of public keys is included in a first transaction database that maintains a first log of transactions;
generating an alert based on determining that the hash-based one-time use public/private key pair was used more than once; and
performing, based on the signature, one or more punitive operations in relation to a sender of the message, wherein the one or more punitive operations comprises forging a signature associated with the one-time use private key based on the message and a previous message of the previously received messages, wherein the previous message is signed using the one-time use private key.
2. The system of claim 1 , wherein the signature is automatically forged in response to the alert.
3. The system of claim 1 , wherein the message is associated with a cryptocurrency, and performing the one or more punitive operations further comprises initiating a transfer of funds from an account of the sender of the message using the forged signature.
4. The system of claim 3 , wherein the funds are automatically transferred using the forged signature in response to the signature being successfully forged.
5. The system of claim 1 , wherein performing the one or more punitive operations further comprises transmitting the alert to a mobile device to cause the mobile device to:
play an alert audio file,
turn on the screen of the mobile device, or
vibrate in response to the alert.
6. The system of claim 1 , wherein the memory system further comprises a second transaction database.
7. The system of claim 1 , wherein the hash-based one-time use public/private key pair is associated with at least one of a Lamport signature scheme, a generalized Bos-Chaum signature scheme, a Lamport-Diffie-Winternitz signature scheme, or a generalized Bos-Chaum-Winternitz signature scheme.
8. A computer-implemented method, comprising:
receiving a message, wherein the message comprises a signature generated using a one-time use private key of a hash-based one-time use public/private key pair;
determining a one-time use public key of the hash-based one-time public/private key pair based on the message;
determining that the hash-based one-time use public/private key pair was used more than once by comparing the one-time use public key to a list of public keys associated with previously received messages, wherein the list of public keys is included in a first transaction database that maintains a first log of transactions;
generating an alert based on determining that the hash-based one-time use public/private key pair was used more than once; and
performing, based on the signature, one or more punitive operations in relation to a sender of the message, wherein the one or more punitive operations comprises forging a signature associated with the one-time use private key based on the message and a previous message of the previously received messages, wherein the previous message is signed using the one-time use private key.
9. The method of claim 8 , wherein the signature is automatically forged in response to the alert.
10. The method of claim 8 , wherein performing the one or more punitive operations further comprises initiating a transfer of funds from an account of the sender of the message using the forged signature.
11. The method of claim 10 , wherein the funds are automatically transferred using the forged signature in response to the signature being successfully forged.
12. The method of claim 8 , wherein performing the one or more punitive operations further comprises transmitting the alert to a mobile device to cause the mobile device to:
play an alert audio file,
turn on the screen of the mobile device, or
vibrate in response to the alert.
13. The method of claim 8 , wherein the memory system further comprises a second transaction database.
14. The method of claim 8 , wherein the hash-based one-time use public/private key pair is associated with at least one of a Lamport signature scheme, a generalized Bos-Chaum signature scheme, a Lamport-Diffie-Winternitz signature scheme, or a generalized Bos-Chaum-Winternitz signature scheme.
15. A non-transitory computer readable storage medium comprising instructions for causing one or more processors to:
receive a message, wherein the message comprises a signature generated using a one-time use private key of a hash-based one-time use public/private key pair;
determine a one-time use public key of the hash-based one-time public/private key pair based on the message;
determine that the hash-based one-time use public/private key pair was used more than once by comparing the one-time use public key to a list of public keys associated with previously received messages, wherein the list of public keys is included in a first transaction database that maintains a first log of transactions;
generate an alert based on determining that the hash-based one-time use public/private key pair was used more than once; and
perform, based on the signature, one or more punitive operations in relation to a sender of the message, wherein the one or more punitive operations comprises forging a signature associated with the one-time use private key based on the message and a previous message of the previously received messages, wherein the previous message is signed using the one-time use private key.
16. The non-transitory computer readable storage medium of claim 15 , wherein the signature is automatically forged in response to the alert.
17. The non-transitory computer readable storage medium of claim 15 , wherein the message is associated with a cryptocurrency, the instructions to perform the one or more punitive operations further comprises initiating a transfer of funds from an account of the sender of the message using the forged signature.
18. The non-transitory computer readable storage medium of claim 17 , wherein the funds are automatically transferred using the forged signature in response to the signature being successfully forged.
19. The non-transitory computer readable storage medium of claim 15 , wherein the instructions to perform the one or more punitive operations further comprises transmitting the alert to a mobile device to cause the mobile device to:
play an alert audio file,
turn on the screen of the mobile device, or
vibrate in response to the alert.
20. The non-transitory computer readable storage medium of claim 15 , wherein the memory system further comprises an instance of a second transaction database.
21. The non-transitory computer readable storage medium of claim 15 , wherein the hash-based one-time use public/private key pair is associated with at least one of a Lam port signature scheme, a generalized Bos-Chaum signature scheme, a Lamport-Diffie-Winternitz signature scheme, or a generalized Bos-Chaum-Winternitz signature scheme.