基于格的无证书盲签名方案  

Certificateless blind signature scheme based on lattice

作　　者：张小萍[1] ZHANG Xiaoping(School of computer,Electronics and Information,Guangxi University,Nanning 530004,China)

机构地区：[1]广西大学计算机与电子信息学院,广西南宁530004

出　　处：《河南科技学院学报（自然科学版）》2021年第4期51-57,共7页Journal of Henan Institute of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金项目(61662004)。

摘　　要：目前已有的无证书盲签名方案都是基于因式分解和求离散对数难解问题的基础上提出的,在量子算法的攻击下是不安全的.针对这一问题,基于格提出一个无证书的盲签名方案.方案中私钥生成中心(KGC)利用陷门生成技术和矩阵采样生成用户的部分私钥,采用拒绝采样技术生成盲签名.经分析,方案满足正确性和盲性,并且在随机预言模型下,基于求解格上小整数解困难性上证明了方案可以抵抗外部或内部敌手的适应性选择身份和选择消息的伪造攻击.方案既保持了无证书密码体制简化密钥管理的方便性,消除了密钥托管的隐患,又增加了抵抗量子攻击的安全性.The existing certificateless blind signature schemes were based on factorization and discrete logarithm problem,which were not secure under the attack of quantum algorithm.To solve this problem,a certificateless blind signature scheme based on lattice was proposed.In the scheme,the private key generation center(KGC)used trapdoor generation technology and Matrix sampling to generate part of the private key of the user,and the rejection sampling technology was used to generate blind signature.After analysis,the scheme satisfies the correctness and blindness,and under the random oracle model,it is proved that the scheme can resist the forgery attack of external or internal adversary's adaptive choice identity and choice message based on the difficulty of solving small integer on lattice.The scheme not only keeps the convenience of certificateless cryptosystem to simplify key management,eliminates the hidden trouble of key escrow,but also increases the security against quantum attack.

关 键 词：格 盲签名 无证书密码体制 拒绝采样 矩阵采样 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]