一个格基无证书签密方案  

CERTIFICATELESS SIGNCRYPTION SCHEMES FROM LATTICES

作　　者：欧海文 施瑞 王佳琳 Ou Haiwen;Shi Rui;Wang Jialin(Department of Cryptology Science and Technology,Beijing Electronics Science and Technology Institute,Beijing 100070,China;School of Telecommunication Engineering,Xidian University,Xi’an 710071,Shaanxi,China)

机构地区：[1]北京电子科技学院密码科学与技术系,北京100070 [2]西安电子科技大学通信工程学院,陕西西安710071

出　　处：《计算机应用与软件》2022年第11期317-323,共7页Computer Applications and Software

摘　　要：现有的无证书签密体制的安全性基于离散对数等传统数论假设,不能有效抵抗量子攻击。针对这个问题,提出第一个基于格理论的无证书签密方案,在给出方案正确性证明的同时,在带错误学习问题和小整数解问题难解性的假设下证明了方案的安全性。与现有的无证书签密方案的安全性相比,所提方案在同等的安全性下能够有效抵抗量子攻击。方案实现过程中未使用格基陷门产生算法及原像抽样算法,有较高的计算效率。The security of the existing certificateless signcryption scheme is based on the assumption of traditional number theory such as discrete logarithm,which can not effectively resist quantum attacks.In order to solve this problem,we proposes the first certificateless signcryption scheme based on lattice theory.We proved the correctness and the security of the scheme under the assumption that it was difficult to solve the learning with error problem and small integer solution.Compared with the existing scheme without certificate,the proposed scheme can effectively resist quantum attacks under the same security.In the implementation of the scheme,the grid based trapdoor generation algorithm and the original image sampling algorithm are not used,so the calculation efficiency of this scheme is high.

关 键 词：无证书签密 格基密码 无陷门格基签密 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]