背包公钥密码安全新方案  

Novel secure scheme on knapsack public-key cryptosystem

作　　者：费向东[1] 潘芳[2] 潘郁[1] Fei Xiangdong;Pan Fang;Pan Yu(College of Economics&Management,Nanjing University of Technology,Nanjing 210009,China;School of Economy&Trade Ma-nagement,Nanjing University of Chinese Medicine,Nanjing 210023,China)

机构地区：[1]南京工业大学经济与管理学院,南京210009 [2]南京中医药大学经贸学院,南京210023

出　　处：《计算机应用研究》2018年第1期240-244,共5页Application Research of Computers

基　　金：国家社会科学基金重大项目(15ZDB166)

摘　　要：将M-H公钥密码改进为一个安全方案并不困难,但存在背包维数过大、密钥过长的问题,从而使密码失去实用性。为此提出一种低维数背包密码抵御明文恢复攻击的方法。通过向真实明文填充随机数,使得参与加密的明文长于密文,一个密文对应许多明文,只有密文的指定接收者因掌握着陷门信息,可从密文恢复出真实明文。以此构造了一个背包密码安全新方案。新方案能抵御目前已知的各类攻击,所有运算的复杂度不超过二次方,信息率不是很高,但在可接受范围内;由于背包维数可以很小,密钥长度相应较短,存储性能大为改善。It is not difficult to refine M-H public-key cryptosystem into a secure scheme,but there exists the problems that the knapsack dimension is too big and the key size is too large,thus making it impractical.Therefore,this paper presented a low dimensional knapsack cryptosystem to avoid plaintext-recovery attack.This approach filled random number in actual plaintext,the encrypted plaintext was longer than the ciphertext,which made a ciphertext correspond to numerous plaintexts.Only the designated ciphertext recipient,because of having the trapdoor information,could restore the actual plaintext from the ciphertext.This paper developed a novel secure scheme on knapsack cryptosystem with this approach.It could avoid all known attacks.All of its computations are no more than quadratic complexity.Its information rate is not very high,but in the acceptable range.As the knapsack dimension may be low,the key size is lesser accordingly,which promotes the storage performance considerably.

关 键 词：背包公钥密码 抗量子计算 安全性 密码性能 加密收缩量 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]