格基强指定验证者签名方案  

Lattice-based Strong Designated Verifier Signature Scheme

作　　者：李明祥[1] 郑艳娟[1] 许明[1] 

机构地区：[1]河北金融学院信息管理与工程系,河北保定071051

出　　处：《小型微型计算机系统》2013年第10期2363-2366,共4页Journal of Chinese Computer Systems

基　　金：国家"九七三"重点基础研究发展计划项目(2011CB311809)资助;国家自然科学基金项目(61163050)资助;河北省教育厅科研项目(ZD2010102)资助

摘　　要：强指定验证者签名只允许指定的验证者验证签名的有效性,它可应用于招标和发放软件许可证等场合.首先利用Boyen提出的基于格的签名方案构造了一个基于格的强指定验证者签名方案,然后在标准模型下基于小整数解(Small integer solution,SIS)问题证明了该方案在适应性选择消息攻击下是存在性不可伪造的.迄今人们提出的基于格的强指定验证者签名方案都是在随机预言模型下可证明安全的,而随机预言模型存在一定的安全缺陷,因此文中提出的基于格的强指定验证者签名方案更有实际意义.A strong designated verifier signature scheme only allows a designated verifier to validate signer＇s signatures, and it can be applied to public bidding, issuing software license, etc. We constructed a lattice-based strong designated verifier signature scheme by use of the lattice-based signature scheme that Boyen has proposed recentlyl Then we formally proved that the proposed signature scheme was existentially unforgeable against adaptive chosen message attacks under the assumption of the small integer solution （ SIS ） problem in the standard model. The existing lattice-based strong designated verifier signature schemes are all proven to be secure in the random oracle model. However, there are some security vulnerabilities for the random oracle model. Therefore, the proposed lat- tice-based strong designated verifier signature scheme in this paper is more practical.

关 键 词：强指定验证者签名 原像抽样算法 SIS问题 格 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]