计算机科学与探索 ›› 2021, Vol. 15 ›› Issue (9): 1658-1666.DOI: 10.3778/j.issn.1673-9418.2102004

• 网络与信息安全 • 上一篇    下一篇

格上前向安全的有序聚合签名

谢佳,胡予濮,高军涛,王保仓,江明明   

  1. 1. 河南财经政法大学 计算机与信息工程学院,郑州 450046
    2. 西安电子科技大学 通信工程学院,西安 710071
    3. 淮北师范大学 计算机科学与技术学院,安徽 淮北 235000
  • 出版日期:2021-09-01 发布日期:2021-09-06

Forward Secure Sequential Aggregate Signature Schemes on Lattice

XIE Jia, HU Yupu, GAO Juntao, WANG Baocang, JIANG Mingming   

  1. 1. School of Computer and Information Engineering, Henan University of Economics and Law, Zhengzhou 450046, China
    2. School of Telecommunications Engineering, Xidian University, Xi'an 710071, China
    3. School of Computer Science and Technology, Huaibei Normal University, Huaibei, Anhui 235000, China
  • Online:2021-09-01 Published:2021-09-06

摘要:

前向安全的有序聚合(Fss-Agg)签名兼顾前向安全签名和有序聚合签名的优势。自2007年提出以来,前向安全的有序聚合签名已被广泛应用于日志系统、电子商务、电子政务、区块链等众多应用场景中。目前现存的几个前向安全的有序聚合签名都是基于传统数论问题,而这些问题随着量子计算机逐渐成为现实,将会变得不再困难。因而,寻找量子计算环境下前向安全的有序聚合签名已迫在眉睫。给出了前向安全有序聚合签名方案的定义,并将前向安全性和存在性不可伪造性两个特性结合,定义了选择消息攻击下有序聚合签名的前向安全的存在性不可伪造性;基于格上的小整数解问题,利用原像采样算法和格基委派技术构造了抗量子攻击的前向安全有序聚合签名方案,即格上首个前向安全的有序聚合签名方案,方案在随机预言机模型下满足正确性和前向安全的存在性不可伪造性。

关键词: 格, 有序聚合签名, 前向安全, 不可伪造性, 抗量子攻击, 小整数解

Abstract:

The forward secure sequential aggregate (Fss-Agg) signature has the advantages of forward secure signature and the sequential aggregate signature at the same time. Since its proposal in 2007, it has been widely applied in many application scenarios, such as logging systems, e-business, e-government, blockchain, etc. Although there have been several Fss-Agg signature schemes, all of them are based on the classic number theory problem, which are no longer secure in the quantum era when the general quantum computers become reality. So looking for the quantum-immune Fss-Agg signature is much urgent. In this paper, the definition of Fss-Agg signature scheme is described, and the forward security and the existential unforgeability under the chosen message attack are combined to define the existential unforgeability of Fss-Agg signature aganist chosen message attack. Based on the small integer solution assumption on lattice, using the pre-image sampling and the lattice basis delegation techniques, the quantum-immune Fss-Agg signature is proposed, which is the first lattice-based Fss-Agg signature scheme. It is proven to be correct, forward secure and existentially unforgeable in the random oracle model.

Key words: lattice, sequential aggregate signature, forward secure, unforgeability, quantum-immune, small integer solution