标准模型下基于身份的多接收者签密密钥封装

Identity-based multi-recipient signcryption key encapsulation in the standard model

签密密钥封装机制能同时实现封装密钥的机密性和认证性。以Wa-IBE加密方案和PS-IBS签名机制为基础,提出一种标准模型下的身份基签密密钥封装机制(IBSC-KEM)和多接收者签密密钥封装机制(mIBSC-KEM)。新方案中的签名算法直接采用了PS-IBS签名,密钥封装算法采用了变形的WaIBE加密方案。因此,新方案的不可伪造性和机密性在标准模型下分别被规约为破解PS-IBS签名与WaIBE加密,具有可证明安全性。新方案可用于构建标准模型下安全的一对一和多对一认证与密钥交换方案。

Signcryption key encapsulation mechanism can simultaneously achieve the confidentiality and authentication of the key. Based on the Wa-IBE encryption and the PS-IBS signature, we propose an identity-based signcryption key encapsulation mechanism （IBSC-KEM） and an identity-based multi-recipient signcryption key encapsulation mechanism （mIBSC-KEM） in the standard model. PS-IBS signature is adopted in the new schemes as a signature algorithm and a variant of Wa-IBE encryption is used by the key encapsulation algorithm. Therefore, the unforgeability and confidentiality of the new schemes are verified in the standard model, and are deduced toward cracking the PS-IBS signature and the Wa-IBE encryption respectively. The new schemes can be used to build secure one-to-one or many- to-one authentication and key exchange schemes.