Home > Resources > papers > BLS01-Short-Sigs

Short Signatures from the Weil Pairing (Boneh, Lynn, Shacham 2001)

Last modified: 2026-10-27

DOI: 10.1007/3-540-45682-1_30 · URL: https://doi.org/10.1007/3-540-45682-1_30

Summary

Introduces BLS signatures: a signature is a single group element H(m)^x on a pairing-friendly curve, verified with a pairing equation, giving very short signatures secure under CDH in gap Diffie–Hellman groups in the random-oracle model. BLS signatures aggregate naturally and are widely deployed (e.g. Ethereum consensus); pairing-based signatures of this family underlie BBS-style anonymous credentials. (ASIACRYPT 2001; journal version JoC 2004.)

Related resources

• A Short-List of Pairing-Friendly Curves Resistant to the Special TNFS Algorithm at the 192-bit Security Level (Aranha, Fotiadis, Guillevic 2024) (paper, 2024)
• Short Group Signatures (Boneh, Boyen, Shacham 2004) (paper, 2004)