一种基于多变量公钥密码体制的改进签名模型  

An improved signature model based on multivariatepolynomial public key cryptosystem

作　　者：王鑫[1] 韩志宇 王新梅[2] 杨帆[1] WANG Xin;HAN Zhi-yu;WANG Xin-mei;YANG Fan(School of Electronic Information and Artificial Intelligence,Shaanxi University of Science&Technology,Xi′an 710021,China;School of Telecommunication Engineering,Xidian University,Xi′an 710126,China)

机构地区：[1]陕西科技大学电子信息与人工智能学院,陕西西安710021 [2]西安电子科技大学通信工程学院,陕西西安710126

出　　处：《陕西科技大学学报》2020年第5期157-164,共8页Journal of Shaanxi University of Science & Technology

基　　金：国家自然科学基金项目(61871260,61871259,61811530325);陕西省科技厅社会发展科技攻关计划项目(2016SF-418,2020GY-091)。

摘　　要：基于线性化分析思想而进行伪造签名的攻击方法是分析多变量公钥密码体制的一种有效分析方法.多变量公钥密码体制的原有签名模型在最初设计时并未考虑中心映射的非单射特性会导致一些潜在攻击,使得现有一定数量的多变量方案在原有模型下屡遭攻破.为解决原有签名模型这一缺陷,通过增加公钥将仅需要外部信息的公钥验证改进为结合内部节点信息的联合验证,提出一种可有效抵抗此类攻击的改进模型.并以经典的MI方案为例,对原有模型和改进模型给出性能对比分析.分析显示,改进模型在保持原有模型安全性的基础上,可有效抵抗基于线性化分析思想的伪造签名攻击,并以少量的计算代价获得更高的安全性.The forging signature attack based on linearization analysis for multivariate polynomial public key cryptosystem is an effective method to analyze multivariate public key cryptosystems.However,the original signature model of multivariable system did not take the potential threat of the forging signature attack based on linearization analysis into account.Therefore,most of the existing signature schemes are vulnerable to forging signature attack.To solve the defect of the forging signature,an improved signature model of multivariate polynomial public key cryptosystem is presented in this paper.One pairs of public keys are added to design new public key authentication verification conditionals,and then the verification is not only to verify the original external information but also the internal kernel information.It requires both the corresponding private key and the exact internal node information to produce an accurate signature,so that a forged signature without the exact private key cannot pass the verification.The classic MI scheme is taken as an example to illustrate the signing and verifying process in detail finally.The contrast analysis of performance of MI in original model and the improved model shows that the new model can effectively resist the forging signature attack based on linearization analysis and achieve higher security at the expense of taking a little more time compared with the original model.

关 键 词：多变量 对称密码 签名 线性化分析 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]