基于高斯抽样算法的NTRU类数字签名方案  

NTRU-class Digital Signature Scheme Based on Gaussian Sampling Algorithm

作　　者：张建航[1,2] 胡予濮[1] 来齐齐[1] 

机构地区：[1]西安电子科技大学计算机网络与信息安全教育部重点实验室,西安710071 [2]西安通信学院,西安710106

出　　处：《计算机工程》2012年第17期126-128,共3页Computer Engineering

基　　金：国家自然科学基金资助项目(61173151);国家"973"计划基金资助项目(2007CB311201)

摘　　要：针对NTRU类数字签名方案的签名值会泄露私钥的部分信息等问题,提出一种NTRU类数字签名方案。该方案通过私钥生成循环格,采用格上高斯抽样算法在此循环格上找出与杂凑后消息最近的向量作为消息的签名值。与现有的方案相比,该方案在保持签名和验证过程效率的同时,安全性方面具有2个新的性质:(1)由公钥伪造签名的困难性是基于循环格上的最近向量问题;(2)由新方案生成的大量签名值在空间分布呈球形,不泄露私钥的任何信息。NTRU-class digital signature schemes have a common weakness that signature value leaks some information on the private key. Aiming at this weakness problem, a novel NTRU-c｜ass digital signature scheme is created. In the new scheme, a cyclic lattice is generated by using private key, the signature value of the message hashed is the closest vector in the cyclic lattice by using the Gaussian sampling algorithm. Compared with ~he exiting schemes, the new scheme remains the efficiency of the signature and the verification. This paper obtains following two new results about the novel scheme： （l）The hardness of tbrging a signature is based on the hardness of the closest vector problem over the cyclic lattice; （2）The distribution of the signature values by using the Gaussian sampling algorithm in the novel scheme is spherical in the space and leaks no information about the private key.

关 键 词：格 量子计算机攻击 数字签名 循环格 最近向量问题 高斯抽样算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]