针对格基环签名方案的陷门基尺寸过大以及环成员的公钥需要数字证书认证的问题,提出一种NTRU(Number Theory Research Unit)格上的身份基环签名方案(NTRU-IBRS)。首先,使用NTRU格上的陷门生成算法生成系统的主公私钥对;然后,将主私钥作...针对格基环签名方案的陷门基尺寸过大以及环成员的公钥需要数字证书认证的问题,提出一种NTRU(Number Theory Research Unit)格上的身份基环签名方案(NTRU-IBRS)。首先,使用NTRU格上的陷门生成算法生成系统的主公私钥对;然后,将主私钥作为陷门信息并对单向函数进行求逆运算以得到环成员的私钥;最后,基于小整数解(SIS)问题使用拒绝抽样技术生成环签名。安全性分析表明,NTRU-IBRS在随机预言机模型下具有匿名性以及适应性选择消息和身份攻击下的存在不可伪造性。性能分析与实验仿真表明,与理想格上的环签名方案和NTRU格上的身份基可链接环签名方案相比,在存储开销方面,NTRU-IBRS的系统私钥长度下降了0~99.6%,签名私钥长度的下降了50.0%~98.4%;在时间开销方面,NTRU-IBRS的总时间开销减少了15.3%~21.8%。将NTRU-IBRS应用于动态车联网(IoV)场景中,模拟结果表明NTRU-IBRS在车辆交互期间能够同时保证隐私安全和提高通信效率。展开更多
In the post quantum era,public key cryptographic scheme based on lattice is considered to be the most promising cryptosystem that can resist quantum computer attacks.However,there are still few efficient key agreement...In the post quantum era,public key cryptographic scheme based on lattice is considered to be the most promising cryptosystem that can resist quantum computer attacks.However,there are still few efficient key agreement protocols based on lattice up to now.To solve this issue,an improved key agreement protocol with post quantum security is proposed.Firstly,by analyzing the Wess-Zumino model+(WZM+)key agreement protocol based on small integer solution(SIS)hard problem,it is found that there are fatal defects in the protocol that cannot resist man-in-the-middle attack.Then based on the bilateral inhomogeneous small integer solution(Bi-ISIS)problem,a mutual authenticated key agreement(AKA)protocol with key confirmation is proposed and designed.Compared with Diffie-Hellman(DH)protocol,WZM+key agreement protocol,and the AKA agreement based on the ideal lattice protocol,the improved protocol satisfies the provable security under the extend Canetti-Krawczyk(eCK)model and can resist man-in-the-middle attack,replay attack and quantum computing attack.展开更多
文摘针对格基环签名方案的陷门基尺寸过大以及环成员的公钥需要数字证书认证的问题,提出一种NTRU(Number Theory Research Unit)格上的身份基环签名方案(NTRU-IBRS)。首先,使用NTRU格上的陷门生成算法生成系统的主公私钥对;然后,将主私钥作为陷门信息并对单向函数进行求逆运算以得到环成员的私钥;最后,基于小整数解(SIS)问题使用拒绝抽样技术生成环签名。安全性分析表明,NTRU-IBRS在随机预言机模型下具有匿名性以及适应性选择消息和身份攻击下的存在不可伪造性。性能分析与实验仿真表明,与理想格上的环签名方案和NTRU格上的身份基可链接环签名方案相比,在存储开销方面,NTRU-IBRS的系统私钥长度下降了0~99.6%,签名私钥长度的下降了50.0%~98.4%;在时间开销方面,NTRU-IBRS的总时间开销减少了15.3%~21.8%。将NTRU-IBRS应用于动态车联网(IoV)场景中,模拟结果表明NTRU-IBRS在车辆交互期间能够同时保证隐私安全和提高通信效率。
基金This work was supported by the China State Cryptography Development Fund of Thirteen Five-year(MMJJ20170110).
文摘In the post quantum era,public key cryptographic scheme based on lattice is considered to be the most promising cryptosystem that can resist quantum computer attacks.However,there are still few efficient key agreement protocols based on lattice up to now.To solve this issue,an improved key agreement protocol with post quantum security is proposed.Firstly,by analyzing the Wess-Zumino model+(WZM+)key agreement protocol based on small integer solution(SIS)hard problem,it is found that there are fatal defects in the protocol that cannot resist man-in-the-middle attack.Then based on the bilateral inhomogeneous small integer solution(Bi-ISIS)problem,a mutual authenticated key agreement(AKA)protocol with key confirmation is proposed and designed.Compared with Diffie-Hellman(DH)protocol,WZM+key agreement protocol,and the AKA agreement based on the ideal lattice protocol,the improved protocol satisfies the provable security under the extend Canetti-Krawczyk(eCK)model and can resist man-in-the-middle attack,replay attack and quantum computing attack.
