基于混淆S盒的高维量子同态加密机制  

High-Dimensional Quantum Homomorphic Encryption Mechanism Based on Obfuscated S-Box

作　　者：宋秀丽[1,2] 周建兵 廖金伟 邓红耀 刘羽 吴涛 SONG Xiu-Li;ZHOU Jian-Bing;LIAO Jin-Wei;DENG Hong-Yao;LIU Yu;WU Tao(College of Computer Science and Technology,Chongqing University of Posts and Telecommunications,Chongqing 400065,China;School of Cyber Security and Information Law,Chongqing University of Posts and Telecommunications,Chongqing 400065,China;College of Big Data and Artificial Intelligence,Yangtze Normal University,Chongqing 400081,China)

机构地区：[1]重庆邮电大学计算机科学与技术学院,重庆400065 [2]重庆邮电大学网络空间安全与信息法学院,重庆400065 [3]长江师范学院大数据与人工智能学院,重庆400081

出　　处：《密码学报（中英文）》2024年第5期1003-1017,共15页Journal of Cryptologic Research

基　　金：国家自然科学基金(62376047);重庆市自然科学基金面上项目(CSTB2023NSCQ-MSX1093);重庆市教委科学技术研究计划重点项目(KJZD-K202300603);河南省网络密码技术重点实验室(LNCT2022-A15)。

摘　　要：在量子同态加密机制中,对密文量子态执行同态评估计算并解密得到的结果与对明文量子态直接评估计算所得的结果相同.现有的量子同态加密机制不仅评估算子的逻辑门种类有限,而且使用单点或多点混淆导致计算开销较大.鉴于此,本文使用量子随机游走构建了一个混淆S盒并将其应用到高维量子同态加密机制的设计之中.客户端使用高维的Pauli算子对明文量子态加密之后,将密文量子态发送至服务器;服务器从评估算子集合中选取客户端需要的评估算子,配合评估参数对密文量子态执行评估操作,并将评估结果发送至解密方执行解密运算.为了避免服务器在执行评估操作时泄露解密密钥,客户端通过设计的混淆S盒来完成对解密密钥的混淆并将结果传输给解密方.解密方执行逆混淆S盒还原出解密密钥,并使用该密钥执行解密操作得到委托计算结果.对比同类型的相似机制,该机制增加了评估算子的种类,降低了量子混淆S盒的开销;通过仿真实验结果证明了提出机制的正确性,并从信息理论层面证明了该机制的安全性.In the homomorphic encryption mechanism,the result of homomorphic evaluation calculation and decryption of the ciphertext quantum state is the same as that of direct evaluation calculation of the plaintext quantum state.The existing quantum homomorphic encryption mechanisms not only are limited to the types of logic gates for evaluating operators,but also use single or multi-point confusions,which lead to high computational overhead.In view of this,a confusion S-box based on quantum random walks is constructed,which is applied to the design of a high-dimensional quantum homomorphic encryption mechanism(HQHEM).In HQHEM,the client encrypts the plaintext states by using high-dimensional Pauli operators,and then sends ciphertext states to the server.The server selects the evaluation operator required by the client from the set of evaluation operators,and then performs the homomorphic operations on the ciphertext state with evaluation parameters.Finally,the server sends the evaluation result to the decryptor.In order to avoid the key being leaked by the server during the evaluation,the client obfuscates the decryption key and transmits the result to the decryptor through the designed S-box.The decryptor performs the reverse obfuscation S-box to obtain the decryption key and uses it to decrypt the evaluation results.Compared to the similar schemes,the proposed HQHEM expands the types of evaluation operators and reduces the cost of the quantum obfuscation S-box.The correctness of HQHEM is demonstrated by simulation results,and the security of it is analyzed by information theory.

关 键 词：量子同态加密 混淆S盒 高维量子逻辑门 评估算子集合 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]