Gaetano Russo

We investigate three promising Quantum Digital Signature (QDS) protocols that can sign arbitrarily long documents with information-theoretic security. We re-derive the security proof of each scheme obtaining, where possible, tighter security bounds while closing security loopholes caused by using non-authenticated communication. In one case, we upgrade the QDS protocol to information-theoretic security by replacing NIST-recommended hash functions with universal hashing. We systematically compare the performance of the three protocols by optimizing over their parameters and deduce the protocol requiring the shortest signatures and the minimal number of preshared secret bits. Finally, we propose a multi-partite QDS protocol that retains the best features of the analyzed protocols while allowing for an arbitrary number of receivers.