zk-snark的双线性对的国密化方案  

National Secret Substitution of zk-snark Bilinear Pair

作　　者：黎琳[1] 张旭霞 LI Lin;ZHANG Xuxia(School of Computer and Information Technology,Beijing Jiaotong University,Beijing 100044,China)

机构地区：[1]北京交通大学计算机与信息技术学院

出　　处：《信息网络安全》2019年第10期10-15,共6页Netinfo Security

基　　金：国家自然科学基金[61572066];信息保障技术重点实验室开放基金[KJ-17-107]

摘　　要：近年来,随着人们对隐私保护的重视,零知识证明技术也得到了迅速的发展。zk-snark是一种简洁的非交互式的零知识证明协议,其中的多项式除法算法采用快速傅立叶变换算法实现,这要求其使用的双线性对的椭圆曲线阶减1有足够大的2的高次赛因子。但现行的国密SM9算法采用的双线性对并不满足这一要求,如果直接用现有的双线性对直接进行替代,将使得zk-snark的性能极大降低。文章基于BN曲线构造双线性对的办法,提出了zk-snark的双线性对的国密化方案,在不影响zk-snark性能的前提下,满足了国密的安全性要求。In recent years,with the emphasis on privacy protection,zero-knowledge proof technology has also developed rapidly,zk-snark is a compact non-interactive zero-knowledge proof protocol,in which the polynomial division algorithm is implemented by the fast Fourier transfbnn algorithm,which requires that the order of the bilinear pair used by zt snark satisfy formula:n-1|2^20.However,the bilinear pairing used in the current national secret SM9 algorithm does not meet this requirement.If the direct replacement with the existing bilinear pair is directly used,the performance of zk-snark will be greatly reduced.In this paper,based on the BN curve to construct a bilinear pairing method,a national secret substitution of zk-snark bilinear paimally densified scheme of zk-snark bilinear pairing is proposed.Under the premise of not affecting the performance of zk-snark,the security requirements of the national secret are met,so that zk-snark can be applied to national secret products.

关 键 词：信息安全 双线性对 BN曲线 zk-snark 国密SM9 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]