无碰撞CPK的种子库构建和选取方案

Construction and selection scheme of seeded-key database of collisionfree CPK

组合公钥CPK(Combined Public Key)是我国拥有完全知识产权的认证技术,与PKI和IBC相比有其独特的优势。但由于密钥由种子密钥经过组合运算生成,因此可能发生碰撞,有效解决碰撞问题已成为CPK体制发展和完善的关键。介绍了CPK的发展、研究现状和存在问题;根据其构建特点,提出了两种新的种子公/私钥组合选取方法,使得在相同规模的安全需求下,所需种子公/私钥量大大减少;针对产生碰撞的两种可能因素提出了解决方案:用分组密码对用户标识进行映射、按照特定规则产生种子公/私钥库以及对椭圆曲线参数进行约束,从根本上消除了碰撞。优化后的CPK体制,无碰撞,种子库规模小,构建效率高,占用空间少,安全性高,可靠性强,便于管理。

Combined Public Key （CPK） is an authentication technique which is an independent intellectual proper- ty of China. Compared with PKI and IBC, CPK has its particular advantages. However, since the secret key is gener- ated by combining several seeded secret keys, collisions might happen. How to avoid collisions efficiently becomes the linchpin of the development of CPK. After the development and problems of CPK are introduced, two novel methods are put forward to select and combine the seeded public/private keys, which reduces the seeds space evi- dently with the same level of security. A solution is proposed aiming at two factors which lead to collisions： using block ciphers to map the user identity, produce seeds in accordance with specific rules and restrict the parameters of elliptic curve. The improved CPK system can provide a collision-free key space with a smaller space of seeds, high efficiency, high security, and easy management.