聚合认证加密方案  

Design of New Aggregate Authenticated Encryption Schemes

作　　者：刘刚[1,2,3] 王鹏 叶顶锋[1,2] LIU Gang;WANG Peng;YE Ding-Feng(State Key Laboratory of Information Security,Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100195,China;School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100049,China;Science and Technology on Communication Security Laboratory,Institute of Southwestern Communication,Chengdu 610041,China)

机构地区：[1]中国科学院信息工程研究所,信息安全国家重点实验室,北京100195 [2]中国科学院大学,网络空间安全学院,北京100049 [3]中国电子科技集团公司第三十研究所,保密通信重点实验室,成都610041

出　　处：《密码学报》2023年第2期415-432,共18页Journal of Cryptologic Research

基　　金：国家重点研发计划(2018YFA0704704,2018YFB0803801);国家自然科学基金(61732021,61472415)。

摘　　要：使用认证码校验密文会使得密文长度比明文长,即会带来数据扩张,在物联网等场景中会大大增加数据传输量.使用一个中间节点将多个用户的认证码聚合起来可以减少认证码数量、减少数据传输量.本文首次将聚合的方法使用在认证加密方案中,定义并构造了单码聚合认证加密方案saAE,生成一个聚合认证码来校验所有用户的密文,给出了安全性证明.定义并构造了多码聚合认证加密方案maAE,利用群组测试方法将认证码聚合成少量几个,不仅能校验密文的完整性,还能在检错能力范围内,判断哪些密文出现了问题.Using authentication tags to check ciphertext causes data expansion compared to the ciphertext encrypted from plaintext.In some applications such as IoT,authentication tags signnificantly increase the quantity of data transmission.One can use an intermediate node to aggregate the multiple messages of users to reduce the number of tags and decrease the quantity of data transmission.This paper first uses aggregate method in authenticated encryption(AE)schemes,defines and constructs a single-tag aggregate AE(saAE)which generates one tag to check all users’ciphertexts,and gives the security proof.Then uses group testing method to define and construct a multi-tag aggregate AE(maAE)which aggregates tags to a small amount of tags.The proposed maAE can check the integrity of ciphertext detect the position of corruptions in the error detecting capability.

关 键 词：认证加密 认证码 聚合 群组测试 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]