一种基于NTRU的轻量级截断式HMAC数字签名机制  

Lightweight Digital Signature Mechanism Based on NTRU for Truncated Hash Message Authentication Codes

作　　者：蒋宁 林浒[2,3] 吴文江 尹震宇[2] JIANG Ning;LIN Hu;WU Wen-jiang;YIN Zhen-yu(University of Chinese Academy of Sciences,Beijing 100049,China;Shenyang Institute of Computing Technology,Chinese Academy of Sciences,Shenyang 110168,China;Shenyang Golding NC & Intelligence Tech. Co.,Ltd.,Shenyang 110168,China;School of Educational Technology,Shenyang Normal University,Shenyang 110034,China)

机构地区：[1]中国科学院大学,北京100049 [2]中国科学院沈阳计算技术研究所,沈阳110168 [3]沈阳高精数控智能技术股份有限公司,沈阳110168 [4]沈阳师范大学教育技术学院,沈阳110034

出　　处：《小型微型计算机系统》2019年第7期1573-1578,共6页Journal of Chinese Computer Systems

基　　金：国家科技重大专项(2017ZX04001001)资助

摘　　要：工业控制网络中通信数据的完整性是信息安全的一个方面.通信数据完整性包括消息认证和实体认证,将两者结合的认证技术是完整性需要解决的问题.该问题的难点在于认证要满足工业控制网络的较少时间消耗要求.本文提出了一种基于NTRU(Number Theory Research Unit)的轻量级截断式HM AC(Hash M essage Authentication Codes)数字签名机制,NTRU-SHAT机制.在NTRU-SHA-T机制中,消息认证使用消息认证码技术,考虑到安全性能因素消息认证码采用SHA(Secure Hash Algorithm)算法.实体认证使用数字签名技术,数字签名技术采用轻量级的非对称密码系统NTRU将消息认证码进行数字签名.为了进一步提升数字签名的效率,将消息认证码进行截断处理.轻量级签名机制既实现了消息认证又实现了实体认证,较少的时间消耗保证工业控制网络的性能.Communication data integrity is a part of security in industrial control netw ork.Communication data integrity includes message authentication and entity authentication.Combining message authentication w ith entity authentication is an issue about data integrity.It is difficult point that authentication technology demands less time consumption in industrial control netw ork.A lightw eight digital signature mechanism based on NTRU(Number Theory Research Unit)for truncated HM AC(Hash M essage Authentication Codes),NTRU-SHA-T mechanism,is proposed.In NTRU-SHA-T mechanism,message authentication codes are used for message authentication.M essage authentication codes based on SHA(secure Hash algorithm)are used because of security performance.Digital signature technology is used for entity authentication.Digital signature technology uses NTRU w hich is lightw eight asymmetric cipher to sign on message authentication codes.To improve the efficiency of digital signature,message authentication codes are truncated.The lightw eight digital signature mechanism based on NTRU implements both message authentication and entity authentication.The less time consumption ensures performance along w ith communication data integrity in industrial control netw ork.

关 键 词：工业控制网络 数据完整性 NTRU 截断式HMAC 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]