基于双线性对的可验证密钥托管方案

Scheme of verifiable key escrow based on bilinear pairing

针对密钥托管存在的问题,采用椭圆曲线密码体制和基于双线性对的可验证秘密共享算法,设计了一种防欺诈的可验证门限密钥托管方案。经验证,该方案在无可信中心的前提下,可防止用户、密钥管理中心、托管代理和监听机构的欺诈行为。并且,由双线性Diffie-Hellman问题的性质可知,在秘密交换时无需进行复杂验证即可防止欺诈。因此,该系统在高安全性的前提下具有更小的复杂度和更高的执行效率。

Aimed at the problems existing in key escrow, a scheme of verifiable threshold key escrow for avoiding cheat, which adopted elliptic curve cryptosystem and the verifiable threshold secret sharing algorithm based on bilinear pairing, is proposed. It is verified that the scheme averts the cheating of users, KMC, escrow agent and supervision agency without trusted center. It is known from the property of bilinear Diffie-Hellman problem that the scheme can avoid cheating without complex validation when the secrets are exchanged. Thus, the system has the advantages of high security, low complexity and high availability.