前向安全的格上基于身份签密方案

doi:10.11772/j.issn.1001-9081.2016.11.3077

计算机应用 ›› 2016, Vol. 36 ›› Issue (11): 3077-3081.DOI: 10.11772/j.issn.1001-9081.2016.11.3077

前向安全的格上基于身份签密方案

项文, 杨晓元, 王绪安, 吴立强

武警工程大学网络与信息安全武警部队重点实验室, 西安 710086

收稿日期:2016-04-18 修回日期:2016-07-03 出版日期:2016-11-10 发布日期:2016-11-12
通讯作者: 项文
作者简介:项文(1990-),男,湖北襄阳人,硕士研究生,主要研究方向:格密码学;杨晓元(1959-),男,湖南湘潭人,教授,硕士,CCF会员,主要研究方向:密码学、可信计算;王绪安(1981-),男,湖北公安人,副教授,博士研究生,主要研究方向:信息安全、密码学;吴立强(1986-),男,陕西蓝田人,讲师,硕士,CCF会员,主要研究方向:格密码学、可证明安全理论。
基金资助:
国家自然科学基金资助项目（61272492，61572521）；陕西省自然科学基础研究计划项目（2015JM8300）；武警工程大学基础研究项目（WJY201422，WJY201523）。

Forward secure identity-based signcryption from lattice

XIANG Wen, YANG Xiaoyuan, WANG Xu'an, WU Liqiang

Key Laboratory of Network and Information Security under Chinese People's Armed Police Force, Engineering University of Chinese People's Armed Police Force, Xi'an Shaanxi 710086, China

Received:2016-04-18 Revised:2016-07-03 Online:2016-11-10 Published:2016-11-12
Supported by:
This work is partially supported by the National Natural Science Foundation of China(61272492, 61572521), the Basic Research Project of Natural Science in Shaanxi province (2015JM6353), the basic Research Project of the Engineering University of CAPF(WJY201422, WJY201523).

摘要/Abstract

摘要： 针对目前基于格的签密方案尚不能满足前向安全性，提出一个具有前向安全的基于身份的签密方案。首先，该方案利用格基授权算法对用户和发送者的公私钥对进行更新；其次，结合基于格上错误学习问题的原像采样算法进行用户签名，并利用包含签名信息的哈希值对消息进行加密。在随机预言机模型下，证明该方案是适应性选择身份和选择密文攻击安全（IND-sID-CCA2）和强不可伪造选择消息攻击安全（sUF-CMA）的，同时证明了该方案具有前向安全性。相对于基于配对的签密方案，所提方案在计算速度和密文扩展率的优势都较为明显。

关键词: 前向安全, 基于身份加密, 错误学习, 格基授权, 选择密文攻击

Abstract: To solve the problem that current signcryption schemes based on lattice cannot achieve forward security, a new identity-based signcryption scheme with forward security was proposed. Firstly, lattice basis delegation algorithm was used to update the users' public keys and private keys. Then, the preimage sampleable functions based on Learning With Errors (LWE) over lattice was used to sign the message,and the signature was also used to encrypt the message. The scheme was proved to be adaptive INDistinguishiability selective IDentity and Chosen-Ciphertext Attack (IND-sID-CCA2) secure, strong UnForgeable Chosen-Message Attack (sUF-CMA) secure and forward secure. Compared with the signcryption schemes based on pairings, the proposed scheme has more advantages in computational efficiency and ciphertext extension rate.

Key words: forward secure, identity-based encryption, Learning With Errors (LWE), lattice basis delegation, chosen ciphertext attack

中图分类号:

TP309

项文, 杨晓元, 王绪安, 吴立强. 前向安全的格上基于身份签密方案[J]. 计算机应用, 2016, 36(11): 3077-3081.

XIANG Wen, YANG Xiaoyuan, WANG Xu'an, WU Liqiang. Forward secure identity-based signcryption from lattice[J]. Journal of Computer Applications, 2016, 36(11): 3077-3081.

参考文献

[1] ZHENG Y. Digital signcryption or how to achieve cost (Signature & Encryption)≤ost(Signature)+cost(Encryption)[C]//Proceedings of the Cryptology-CRYPTO'97, LNCS 1294. Berlin:Springer, 1997:165-179.
[2] MALONE-LEE J. Identity-based signcryption[C]//Proceedings of Public Key Cryptography-PKC 2005, LNCS 3386. Berlin:Springer, 2002:362-379.
[3] SHAMIR A. Identity-based crypto systems and signature schemes[C]//Proceedings of CRYPTO 84 on Advances in Cryptology. New York:Springer-Verlag, 1984:47-53.
[4] 张串绒,张玉清,李发根,等.适用于Ad Hoc网络安全通信的新签密算法[J].通信学报,2010,31(3):19-24.(ZHANG C R, ZHANG Y Q, LI F G, et al. New signcryption algorithm for secure communication of Ad Hoc networks[J]. Journal on Communications, 2010, 31(3):19-24.)
[5] 张宇,杜瑞颖,陈晶,等.对一个基于身份签密方案的分析与改进[J].通信学报,2015,36(11):174-179.(ZHANG Y, DU R Y, CHEN J, et al. Analysis and improvement of an identity-based signcryption[J]. Journal on Communications, 2015, 36(11):174-179.)
[6] REGEV O. Lattice-based cryptography[C]//Advances in Cryptology-CRYPTO 2006. Berlin:Springer, 2006:131-141.
[7] REGEV O. On lattices, learning with errors, random linear codes, and cryptography[J]. Journal of the ACM, 2009, 56(6):Article No. 34.
[8] AGRAWAL S, DAN B, BOYEN X. Efficient lattice (H)IBE in the standard model[C]//Proceedings of the 29th Annual International Conference on Theory and Applications of Cryptographic Techniques. Berlin:Springer, 2010:553-572.
[9] SINGH K, PANDURANGAN C, BANERJEE A K. Adaptively secure efficient lattice (H)IBE in standard model with short public parameters[C]//Proceedings of the 2nd International Conference on Security, Privacy, and Applied Cryptography Engineering. Berlin:Springer, 2012:153-172.
[10] 张彦华,胡予濮,江明明,等.格上可撤销的基于身份的适应性安全的加密方案[J].电子与信息学报,2015,37(2):423-428.(ZHANG Y H, HU Y P, JIANG M M, et al. A Lattice-based revocable adaptive-ID secure encryption scheme[J].Journal of Electronics & Information Technology, 2015,37(2):423-428.)
[11] LI F, BIN MUHAYA F T, KHAN M K, et al. Lattice-based signcryption[J]. Concurrency & Computation Practice & Experience, 2013, 25(14):2112-2122.
[12] YAN J H, WANG L C, WANG L H, et al. Efficient lattice-based signcryption in standard model[J]. Mathematical Problems in Engineering,2013(11):1-18.
[13] MICCIANCIO D, PEIKERT C. Trapdoors for lattices:simpler, tighter, faster, smaller[C]//Proceedings of the 31st Annual International Conference on the Theory and Applications of Cryptographic Techniques. Berlin:Springer, 2011:700-718.
[14] LU X H, WEN Q Y, JIN Z P, et al. A lattice-based signcryption scheme without random oracle[J]. Frontiers of Computer Science,2014,8(4):667-675.
[15] GVNTHER C G. An identity-based key-exchange protocol[C]//Proceedings of the 1989 Workshop on the Theory and Application of Cryptographic Techniques. Berlin:Springer, 1989:235-238.
[16] SINGH K, PANDURANGAN C, BANERJEE A K. Lattice forward-secure identity based encryption scheme[J].Journal of Internet Services and Information Security, 2012, 2(3/4):118-128.
[17] AGRAWAL S, DAN B, BOYEN X. Lattice basis delegation in fixed dimension and shorter-ciphertext hierarchical IBE[C]//Proceedings of the 30th Annual Conference on Advances in Cryptology. Berlin:Springer, 2010:98-115.
[18] GORDON S D, KATZ J, VAIKUNTANATHAN V. A group signature scheme from lattice assumptions[C]//Proceedings of the 16th International Conference on the Theory and Application of Cryptology and Information Security. Berlin:Springer, 2010:395-412.
[19] GENTRY C, PEIKERT C, VAIKUNTANATHAN V. Trapdoors for hard lattices and new cryptographic constructions[J]. Electronic Colloquium on Computational Complexity, 2015, 14:197-206.

前向安全的格上基于身份签密方案

Forward secure identity-based signcryption from lattice

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	郑尚文, 刘尧, 周潭平, 杨晓元. 优化的基于错误学习问题的CKKS方案[J]. 计算机应用, 2021, 41(6): 1723-1728.
[2]	张恩, 侯缨盈, 李功丽, 李会敏, 李钰. 基于错误学习的自适应等级可搜索加密方案[J]. 计算机应用, 2020, 40(1): 148-156.
[3]	刘相信, 杨晓元. 基于Niederreiter编码的混合加密方案的改进[J]. 计算机应用, 2018, 38(6): 1644-1647.
[4]	黄文真, 杨晓元, 王绪安, 吴立强. 格上基于身份的广播加密方案[J]. 计算机应用, 2016, 36(4): 956-961.
[5]	屈娟, 李艳平, 伍习丽. 对两个基于智能卡的多服务器身份认证方案的密码学分析与改进[J]. 计算机应用, 2015, 35(8): 2199-2204.
[6]	王泽成. 标准模型下可证明安全的新公钥加密方案[J]. 计算机应用, 2013, 33(02): 441-446.
[7]	张龙翔. 改进的双方密钥协商协议 [J]. 计算机应用, 2012, 32(11): 3147-3152.
[8]	张敏情付文华吴旭光. 基于组合设计和身份加密的分簇无线传感器网络密钥管理方案[J]. 计算机应用, 2012, 32(05): 1392-1396.
[9]	唐拥政王明辉王建东. EPC Gen2标准下强安全射频识别认证协议[J]. 计算机应用, 2012, 32(04): 968-970.
[10]	高海英. 高效的基于身份的认证密钥协商协议[J]. 计算机应用, 2012, 32(01): 35-37.
[11]	杨小东王彩芬. 前向安全的单向门限代理重签名[J]. 计算机应用, 2011, 31(03): 801-804.
[12]	章志明王祖俭彭雅丽余敏. 一种无线传感器网络的密钥管理方案[J]. 计算机应用, 2008, 28(5): 1164-1166.
[13]	阿力木江艾沙刘胜全. 一种改进的前向安全数字签名方案[J]. 计算机应用, 2008, 28(2): 440-442.
[14]	左为平王彩芬. 具有前向安全性质的指定验证人代理签名方案[J]. 计算机应用, 2007, 27(8): 1898-1900.
[15]	孙飞显; 徐明洁; 杨进; 王铁方; 刘孙俊. 基于Web的教务管理系统安全方案设计[J]. 计算机应用, 2006, 26(5): 1198-1201.