可完全验证的双线性对运算外包算法  

New algorithms for verifiable outsourcing of bilinear pairings

作　　者：任艳丽[1] 丁宁[2,3] 王天银[4] 陆海宁[5] 谷大武[2] 

机构地区：[1]上海大学通信与信息工程学院,上海200444 [2]上海交通大学电子信息与电气工程学院,上海200240 [3]密码科学技术国家重点实验室,北京100878 [4]洛阳师范学院数学科学学院,洛阳471022 [5]上海交通大学信息安全工程学院,上海200240

出　　处：《中国科学：信息科学》2016年第7期855-869,共15页Scientia Sinica(Informationis)

基　　金：国家自然科学基金(批准号:61202367;61572309;61572246);教育部博士点基金(批准号:20120073110094);上海市教委创新基金(批准号:14YZ020);河南省科技创新人才支持计划和河南省高校科技创新人才支持计划(批准号:13HASTIT042)资助项目

摘　　要：双线性对运算是基于对的密码学中最昂贵的运算.基于两个不可信的服务器,本文首先提出了单个双线性对运算的外包计算方案.用户不需要执行任何复杂度高的运算,如标量乘、模乘运算等.本文还提出了多个双线性对运算的外包方案,效率远远高于调用单个对运算外包方案.在所提的两个算法中,如果服务器不诚实,用户均能以概率1检测到错误.基于两个算法,本文还提出了可外包解密的基于身份匿名加密方案和签名外包验证的基于身份签名方案.It is well known that the computation of bilinear pairing is the most expensive operation in pairingbased cryptography. In this paper, we first propose a secure verifiable outsourcing algorithm of single bilinear pairing based on two servers in the one-malicious model. The outsourcer need not execute any expensive operations, such as scalar multiplication or modular exponentiation. We also present another verifiable outsourcing algorithm for multiple bilinear pairings. This algorithm is much more efficient than the repeated invocation of the outsourcing algorithm of single bilinear pairing. Both of the proposed algorithms enable the outsourcer to detect any failure with a probability of 1 if one of the servers misbehaves. Finally, we utilize the proposed algorithms as two subroutines to achieve an anonymous identity-based encryption（AIBE） scheme with outsourced decryption and an identity-based signature（IBS） scheme with outsourced verification.

关 键 词：云计算 可验证 外包计算 双线性对 模指数运算 基于身份加密 

分 类 号：TN918.4[电子电信—通信与信息系统]