密文长度固定的全聚合签密方案

Aggregate signcryption scheme with full aggregation and constant ciphertext

聚合签密能聚合多个密文并提供批量验证,极大降低了信息传输的功耗,因此在大规模通信的多对一模式下非常适用。但是传统的聚合签密只能对密文进行部分聚合,不能最大限度地发挥出聚合功能的优越性。设计了一个密文长度固定的全聚合签密方案,实现了密文长度固定,而解密者可以通过特定解密操作将多个明文消息依次恢复出来。方案极大地提高了通信效率,签密文长度仅为|G1|,且与用户数量无关,同时方案满足机密性、不可伪造性和可公开验证性,非常适合在网络带宽受限环境下使用。

Aggregate signcryption could provide shortened ciphertext and the batch verification, which could reduce the over- head greatly and was useful in the many to one communication. But the traditional schemes of aggregate signcryption only could provide part aggregation, which could not play the best of aggregation. This paper proposed an aggregate signcryption scheme with full aggregation and constant ciphertext, which could provide constant ciphertext and the receiver could recover the plain- texts successively through given operations. It proved the proposal to be more efficient, the length of eiphertext was only｜I G1 ｜. What is more, the scheme is proved to be confidential and unforgeable and can provide with public verifiability at the same time, which is suited to use in the networks with constrained bandwidth.