The Native-Signature Boundary in Post-Quantum Distributed Authorization

• URL: http://arxiv.org/abs/2609.03547v1
• Date: Thu, 03 Sep 2026 08:47:05 GMT
• Title: The Native-Signature Boundary in Post-Quantum Distributed Authorization
• Abstract summary: Post-quantum signature migration poses a distinct systems problem when authorization is distributed among multiple parties.<n>This paper organizes that design boundary through three properties: native-signature compatibility, unilateral-signing resistance, and threshold-layer agility.
• Score: 0.0
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Post-quantum signature migration poses a distinct systems problem when authorization is distributed among multiple parties. In native threshold signing, the signature algorithm may determine key generation, share state, preprocessing, interaction, combination, refresh, and recovery. Architectures that evaluate threshold policy outside the native signing relation can reduce this coupling, but their authorization evidence is not accepted by an unchanged native verifier unless a trusted complete-key signer translates approval into a native signature. This paper organizes that design boundary through three properties: native-signature compatibility, unilateral-signing resistance, and threshold-layer agility. We classify specialized threshold signatures, generic MPC signing, distributed hash-based constructions, programmable multisignature and dual-gate authorization, and threshold-authorized HSM signing. A migration impact surface identifies which components change with the signature algorithm. Across the surveyed families, no design simultaneously provides native output, unilateral-signing resistance, and threshold-layer agility. This is an architectural tension, not an impossibility claim, and it clarifies why a replaceable API alone does not make distributed authorization cryptographically agile.

Related papers

• From Review to Authorization: Key-Isolated Threshold Signing for LLM Agents [5.02192791020171]
  KITA is a review-to-authorization architecture that keeps the user's secret signing key.<n>We implement the complete reviewer-to-executor path with a structured-output LLM adapter.
  arXiv  Detail & Related papers  (2026-09-05T05:53:51Z)
• Threshold Authorization Without Threshold Signatures: Signature-Agnostic MPC Custody [0.0]
  We present a dual-gate architecture that separates member authentication from threshold authorization.<n>The architecture can be deployed wherever the asset-control path supports programmable verification.
  arXiv  Detail & Related papers  (2026-07-09T08:20:45Z)
• GoodDiffusion: Proactive Copyright Protection for Diffusion Bridge Models via Learnable Sample-specific Signatures [88.63093209858387]
  We propose GoodDiffusion, inspired by backdoor mechanisms, to enforce model-level use-time control.<n>GoodDiffusion preserves high-quality generation for authorized queries carrying valid signatures, yet refuses to generate for unauthorized inputs.<n>To strengthen security, we introduce a Learnable Signature Network (LSN) that assigns sample-specific signatures conditioned on each input.
  arXiv  Detail & Related papers  (2026-06-29T04:07:09Z)
• Hierarchical Identity-Based Signature with Designated Aggregator from Lattices [0.612477318852572]
  We introduce the HIBS-DA framework and present the emfirst lattice-based construction of HIBS-DA.<n>Our scheme allows users at different hierarchical levels to generate individual signatures that can be aggregated into a single, compact signature.<n>The proposed construction is secure, correct, and resistant to forgery, making it suitable for large-scale environments such as universities, corporations, and government agencies.
  arXiv  Detail & Related papers  (2026-06-12T04:06:17Z)
• MiA-Signature: Approximating Global Activation for Long-Context Understanding [48.9604042895266]
  We introduce the concept of textbfMindscape Activation Signature (MiA-Signature), a compressed representation of the global activation pattern induced by a query.<n>The resulting MiA-Signature serves as a conditioning signal that approximates the effect of the full activation state while remaining computationally tractable.
  arXiv  Detail & Related papers  (2026-05-07T15:25:02Z)
• ZK-ACE: Identity-Centric Zero-Knowledge Authorization for Post-Quantum Blockchain Systems [1.7429038786735553]
  ZK-ACE is an authorization layer that replaces transaction-carried signature objects with identity-bound zero-knowledge authorization statements.<n>We formalize ZK-ACE with explicit game-based security definitions for authorization soundness, replay resistance, substitution resistance, and cross-domain separation.<n>A structural, protocol-level data accounting demonstrates an order-of-magnitude reduction in consensus-visible authorization data relative to direct post-quantum signature deployment.
  arXiv  Detail & Related papers  (2026-03-09T05:21:44Z)
• Authenticated Contradictions from Desynchronized Provenance and Watermarking [48.47756819432157]
  This work formalizes and empirically demonstrates the $textitIntegrity Clash$, a condition in which a digital asset carries a cryptographically valid C2PA manifest asserting human authorship.<n>We propose a cross-layer audit protocol that jointly evaluates provenance metadata and watermark detection status, achieving 100% classification accuracy across 3,500 test images.
  arXiv  Detail & Related papers  (2026-03-02T20:42:12Z)
• Overcoming Joint Intractability with Lossless Hierarchical Speculative Decoding [58.92526489742584]
  We propose provably lossless.<n> verification method that significantly boosts the expected number of accepted tokens.<n>We show that HSD yields consistent improvements in acceptance rates across diverse model families and benchmarks.
  arXiv  Detail & Related papers  (2026-01-09T11:10:29Z)
• DiVerify: Hardening Identity-Based Software Signing with Programmable Diverse-Context Scopes [11.521573335215239]
  State-of-the-art identity-based code signing schemes have a major shortcoming.<n>They fail to provide verifiable information about the context in which a signature is generated.<n>We propose a diverse identity verification approach that reduces reliance on a single source of verification.
  arXiv  Detail & Related papers  (2024-06-21T18:53:52Z)
• Revocable Quantum Digital Signatures [57.25067425963082]
  We define and construct digital signatures with revocable signing keys from the LWE assumption. In this primitive, the signing key is a quantum state which enables a user to sign many messages. Once the key is successfully revoked, we require that the initial recipient of the key loses the ability to sign.
  arXiv  Detail & Related papers  (2023-12-21T04:10:07Z)
• FedSOV: Federated Model Secure Ownership Verification with Unforgeable Signature [60.99054146321459]
  Federated learning allows multiple parties to collaborate in learning a global model without revealing private data. We propose a cryptographic signature-based federated learning model ownership verification scheme named FedSOV.
  arXiv  Detail & Related papers  (2023-05-10T12:10:02Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.