基于变量组合的REESSE1-E签名方案  

REESSE1-E Public-Key Signature Scheme Based on Variable Combination

作　　者：苏盛辉[1] 吕述望[2] 

机构地区：[1]北京工业大学计算机学院,北京100124 [2]中国科学院研究生院,北京100039

出　　处：《电子学报》2010年第1期234-238,共5页Acta Electronica Sinica

基　　金：国家863高技术研究发展计划(No.2009AA01Z441);国家973重点基础研究发展规划(No.2007CB311100)

摘　　要：文章介绍了互素序列的定义和杠杆函数的概念,描述了REESSE1-E签名方案的密钥生成、数字签名和身份验证三个算法,证明了验证算法的正确性,示范了如何利用变量之间的组合来构造难题.文章从五个主要方面分析了签名与验证的安全性,它包括从公钥推导私钥、从签名码提取私钥、仅通过公钥伪造签名码、通过已知签名码和公钥伪造另一个签名码以及通过选择消息伪造签名码等.分析表明基于变量组合的REESSE1-E签名方案的安全性等价于离散对数难题.Presents the definition of a coprime sequence and the concept of the lever function,elaborates the three algorithms of the REESSE1-E public-key signature scheme for key generation,digital signature and identity verification,proves the correctness of the verification algorithm,and illustrates how the hardnesses are constructed by means of variable combination.The paper analyzes the security of the REESSE1-E against inferring a private key from a public key,extracting a private key from a signature,and faking a signature only through a public key,through known signatures with a public key,or through chosen messages,which manifests that the lowest security of REESSE1-E based on variable combination is equivalent to the discrete logarithm problem.

关 键 词：签名方案 安全性 变量组合 离散对数问题 杠杆函数 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]