S-Auth: Schnorr-enhanced Authentication Scheme for Security and Efficiency in Blockchain Web3.0

초록

Web3 authentication stacks largely inherit ECDSA centric single-signature workflows that limit security and efficiency, while custody of identity data often remains application controlled rather than self-sovereign. We present S-Auth, an authentication layer that combines BIP340 Schnorr signatures with Decentralized Identifiers (DID), Verifiable Credentials (VC), and Content addressing (CID). The proposed solution utilizes Schnorr digital signatures, which have demonstrated improved security and efficiency over traditional schemes. The contributions of this work are as follows. Firstly, we apply the BIP340 standard to Schnorr digital signatures, bolstering security against various attacks including strong unforgeability under chosen message attack (SUF-CMA), non-malleability, linearity, related-key at tacks, hash collision, fault injection, nonce exfiltration, resource exhaustion, and domain separation. Secondly, we leverage the linearity property of Schnorr signatures to enable multi-signature aggregation and batch verification, addressing the inefficiency of existing schemes that rely on single signatures and thereby also enhancing privacy. Third, we combine the blockchain with DID, VC, and IPFS to provide a secure and self-sovereign identity that can be authenticated. Experiments comparing ECDSA, Ed25519, Schnorr, and BIP340 show that S-Auth reduces signature artifacts via aggregation, improves verifier throughput with batching, and decreases anchoring overhead while preserving user-controlled identity. S-Auth provides a self-sovereign, efficient, and secure authentication mechanism suitable for Web3 environments. © 2004-2012 IEEE.

키워드