A Short Server-Aided Certificateless Aggregate Multisignature Scheme in the Standard Model

Table 1

is the size of the aggregating set of signers; is fixed at the setup. denotes pairing computation, denotes exponentiation, and denotes hash operation. Note that only our scheme is described in type 3 Pairings.

	Signature	Secret-key	Public-key	Signing	Verifying
[3]	1	1	2		3P + 1H
[4]	1+ 1	2	2		(+ 3)exp + 2H
[5]	(+ 1)	1+ 1	2	4exp + 3H	2exp + 3P (3+ 1)H
Ours	3+ 1	3+ 1	3+ (n + 3)	(2+ 9)exp + (2+ 1)H	(+ 1)exp + 3P+(2+ 1)H