基于秘密共享的数字签名方案

Digital signature scheme based on secret sharing

针对数字签名安全性问题,利用离散对数问题的难解性和零知识证明协议,结合(t,n)门限签名方案与参与者的身份,提出了一种基于秘密共享的数字签名方案。方案中,无可信秘钥分发中心,参与者的秘密份额由参与者自己生成,能多次使用,且参与者的身份由参与者结合自己的秘密份额生成;秘密更新只更新公开信息,不影响参与者的秘密份额;任何人都可检测分发者是否欺骗参与者及参与者之间是否有欺骗行为;只有授权子集用户才能代表群体进行签名,部分签名和群签名的生成与验证有效;离散对数问题的难解性及零知识证明协议保证信息传输的安全性,进而使得方案的安全性进一步提高。分析表明,该方案是安全的、有效的。

As for the security of digital signature, this paper takes advantage of the discrete logarithm problem and zero- knowledge proof protocol, combines with （t, n） threshold signature scheme and the identity of the participants, and pres- ents a digital signature scheme based on secret sharing. In the scheme, there is no trusted key distribution center, and the secret share of the participants is generated by the participants themselves and can be used repeatedly, furthermore, the i- dentity of the participants is generated by their own secret share. Only the public information can be updated, which will not affect the participants＇ secret share. Anyone can detect whether the dealer is cheating the participants or whether there is cheating between participants. Only the authorized subset client can represent group to sign ; the generation and verification of the partial signature and group signature are effective. The discrete logarithm problem and zero-knowledge proof protocol guarantees the security of information transmission, which further improves the security of the scheme. The analysis indicates that the scheme is safe and efficient.