基于同源的抗量子群密钥交换协议  

Group key exchange protocols from supersingular isogenies

作　　者：樊雪君 王龙 徐秀 宋宁宁 范晶[1] 王怡 Fan Xuejun;Wang Long;Xu Xiu;Song Ningning;Fan Jing;Wang Yi(National Computer System Engineering Research Institute of China,Beijing 100083,China;China Academy of Information and Communication Technology,Beijing 100191,China)

机构地区：[1]华北计算机系统工程研究所,北京100083 [2]中国信息通信研究院,北京100191

出　　处：《信息技术与网络安全》2022年第5期1-8,共8页Information Technology and Network Security

摘　　要：面对越来越多的基于群成员协同操作的需求,群密钥交换协议在近期的研究中受到了广泛的关注。基于同源的密码协议是抗量子密码中的重要组成部分,因此文章主要关注基于同源的群密钥交换协议。针对超奇异同源的困难问题,提出了两个2轮的基于超奇异同源的群密钥交换协议,均是针对Burmester-Desmedt(BD)协议的优化。此外,为了证明协议的安全性,分别针对两个优化版本的群密钥交换协议给出了安全性证明。通过与现有的协议进行比较,可发现所提出的两个协议在通信量和计算复杂度上都有所降低。Group key exchange(GKE)protocols get much attention in current research with increasing applicability in numerous group-oriented and collaborative applications.Isogeny-based cryptosystem is one of the significant components of post-quantum cryptography,so this paper mainly considers the group key exchange protocol based on isogeny.In this paper,we propose two schemes on supersingular isogenies.They all have two rounds.They are optimizations of Burmester-Desmedt(BD)protocol without authentication.We give formal proofs for their security.We also give a comparison of our methods and these existing GKE protocols.Compared with the existing protocols,the results show that our methods are more efficient in the view of communication and computation time.

关 键 词：抗量子 超奇异同源 SIDH 密钥交换协议 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]