Short one-time signatures

We present a new one-time signature scheme having short signatures. Our newscheme is also the first one-time signature scheme that supports aggregation, batchverification, and which admits efficient proofs of knowledge. It has a fastsigning algorithm, requiring only modular additions, and its verification cost iscomparable to ECDSA verification. These properties make our scheme suitablefor applications on resource-constrained devices such as smart cards and sensornodes.