基于格的变色龙签名方案  

Chameleon Signature Scheme Based on Lattice

作　　者：谢璇[1] 喻建平[1] 王廷[1] 张鹏[1] 

机构地区：[1]深圳大学ATR国防科技重点实验室,深圳518060

出　　处：《计算机科学》2013年第2期117-119,共3页Computer Science

基　　金：国家自然科学基金(61171072;61001058)资助

摘　　要：与普通数字签名相比,变色龙签名不仅满足不可否认性,而且具有非交互式、不可传递的特点。然而,基于传统数学难题构造的变色龙签名方案不能抵抗量子计算机的攻击。为了设计在量子计算机环境下依然安全的变色龙签名,利用格上小整数解问题SIS(Small Integer Solution)和非齐次小整数解问题ISIS(Inhomogeneous Small Integer So-lution)的困难性假设,构造了基于格的变色龙签名方案。在随机预言模型下,证明了该方案在适应性选择消息攻击下是安全的。The chameleon signatures not only meet the characteristics of non-repudiable,but also are non-interactive and non-transferable compared with the traditional digital signatures. However, the scheme of chameleon signature based on traditional mathematic problem construction can not defense the attack of the quantum computers. In order to design a safe Chameleon signature in the environment of quantum computers, a lattice-based Chameleon signature was proposed, which is based on the hardness of average-case SIS（Small Integer Solution） and ISIS（Inhomogeneous Small Integer So- lution）. Further more, we proved that this scheme is unforgeability under adaptive chosen-message attack in the random oracle model.

关 键 词：格 变色龙签名 变色龙哈希函数 SIS ISIS 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]