NTRUSign签名算法中哈希函数分析  

Analysis of Hash Function for NTRUSign Algorithm

作　　者：李道丰[1] 覃勇[1] 王智文[1] 

机构地区：[1]广西工学院计算机工程系,广西柳州545006

出　　处：《广西工学院学报》2010年第3期76-79,83,共5页Journal of Guangxi University of Technology

基　　金：广西教育厅项目(500767)资助

摘　　要：通过对嵌入标准EESS#1中NTRUSign签名算法所采用的哈希函数进行结构剖析及其安全性分析,并在结构设计分析中指出了所采用哈希函数为二层迭代的MD结构,证明了哈希函数具有抗碰撞的安全性,但因其填充模块采用全零填充,导致存在伪造签名安全隐患.This paper focuses on the analysis of structure and security of the hash function for NTRUSign algorithm proposed in embedded security standard #ESS1.The struction of the employed hash function is pointed out to be the MD struction with two iteration in the struction analysis algorithm.The test and analysis results are concluded that the employed hash function is secure with the performance of collision resistance.But because all-zero padding is adopted in the message padding module,it would result in signature forgery attack.Finally some suggestions are proposed for the further researches.

关 键 词：NTRUSIGN 哈希函数 迭代结构 碰撞 

分 类 号：TN918.1[电子电信—通信与信息系统]