计算机科学与探索 ›› 2021, Vol. 15 ›› Issue (10): 1912-1920.DOI: 10.3778/j.issn.1673-9418.2104028

• 网络与信息安全 • 上一篇    下一篇

标准模型下前向安全的格基有序聚合签名

谢佳,胡予濮,高军涛,王保仓,江明明   

  1. 1. 河南财经政法大学 计算机与信息工程学院,郑州 450046
    2. 西安电子科技大学 通信工程学院,西安 710071
    3. 淮北师范大学 计算机科学与技术学院,安徽 淮北 235000
  • 出版日期:2021-10-01 发布日期:2021-09-30

Forward Secure Lattice-Based Sequential Aggregate Signature Schemes in Stan-dard Model

XIE Jia, HU Yupu, GAO Juntao, WANG Baocang, JIANG Mingming   

  1. 1. School of Computer and Information Engineering, Henan University of Economics and Law, Zhengzhou 450046, China
    2. School of Telecommunications Engineering, Xidian University, Xi??an 710071, China
    3. School of Computer Science and Technology, Huaibei Normal University, Huaibei, Anhui 235000, China
  • Online:2021-10-01 Published:2021-09-30

摘要:

在前向安全有序聚合(FssAgg)签名系统中,签名人以分层的“洋葱式”的方式,将不同时段不同密钥下的签名逐步有序地聚合成一个签名。其中,最内层的签名是第一个签名。另外,与普通的有序聚合签名相比,前向安全有序聚合签名是对同一个签名人不同签名的聚合,而非对不同签名人签名的聚合,因而签名验证者使用一个公钥即可完成对所有聚合过程的验证。前向安全的有序聚合签名兼具前向安全签名和聚合签名的优点,自2007年提出以来,已被广泛应用于日志系统、区块链等众多应用场景中。目前现存的几个前向安全的有序聚合签名都是基于传统数论问题的,而这一问题在后量子时代将会变得不再困难。因而,寻找量子计算环境下前向安全的有序聚合签名已迫在眉睫。基于格上的小整数解问题,构造了标准模型下前向安全的格基有序聚合签名方案。为达到高效率目的,方案借助于固定维数格基委派技术实现密钥更新,达到前向安全性;随后通过消息添加技术和原像采样算法分别将待签消息和格上困难问题嵌入到签名中,使得签名在标准模型下是不可伪造的。

关键词: 格, 有序聚合签名, 前向安全, 不可伪造性, 抗量子攻击, 小整数解, 标准模型

Abstract:

In the forward secure sequential aggregate (FssAgg) signature scheme, the signer combines signatures generated in different intervals under different secret keys incrementally and sequentially in a layered “onion-like” fashion with the first signature innermost in the aggregate. In contrast with general (not forward-secure) aggregate signature schemes which aggregate signatures from multiple signers, a FssAgg signature scheme aggregates signatures of a single signer not the signatures of different signers, so the verifier uses a single public key to verify the entire aggregate. With the advantages of forward secure signature and the aggregate signature at the same time, the FssAgg signature scheme has been widely applied in logging systems and blockchain since it was proposed in 2007. Although there have been several FssAgg signature schemes, all of them are based on the classic number theory problem, which are no longer secure in the quantum era. So looking for the quantum-immune FssAgg signature is much urgent. Based on the small integer solution over lattice, a FssAgg signature in the standard model is proposed. In order to improve the efficiency, this paper uses the fixed-dimensional lattice basis delegation technique to update the keys, and the forward security is achieved. This paper uses the message addition technique and the pre-image sampling technique to embed the message and the small integer solution into the signature process, and the existentially unforgeability of the scheme is also guranteed in the standard model.

Key words: lattice, sequential aggregate signature, forward secure, unforgeability, quantum-immune, small integer solution, standard model