格上身份基可追踪环签名方案

doi:10.19665/j.issn1001-2400.2023.02.016

西安电子科技大学学报 ›› 2023, Vol. 50 ›› Issue (2): 161-168.doi: 10.19665/j.issn1001-2400.2023.02.016

格上身份基可追踪环签名方案

叶青¹(),陈晴晴¹(),豆永鹏²(),张静¹,汤永利¹()

1.河南理工大学软件学院,河南焦作 454003
2.陆军装备部驻西安军事代表局驻西安地区第七军事代表室,陕西西安 710065

收稿日期:2022-07-28 出版日期:2023-04-20 发布日期:2023-05-12
作者简介:叶青(1981—),女,副教授,E-mail:504112472@qq.com;|陈晴晴(1995—),女,河南理工大学硕士研究生,E-mail:18839136082@163.com;|豆永鹏(1982—),男,高级工程师,E-mail:296812083@qq.com;|汤永利(1972—),男,教授,E-mail:yltang@hpu.edu.cn
基金资助:
国家自然科学基金(61802117);河南省高校科技创新团队支持计划(20IRTSTHN013);河南理工大学青年骨干教师资助计划(2018XQG-10)

Identity-based traceable ring signature scheme on lattice

YE Qing¹(),CHEN Qingqing¹(),DOU Yongpeng²(),ZHANG Jing¹,TANG Yongli¹()

1. School of Software,Henan Polytechnic University,Jiaozuo 454003,China
2. The Seventh Military Representative Office of the Military Representative Bureau of the Army Equipment Department in Xi’an,Xi’an 710065,China

Received:2022-07-28 Online:2023-04-20 Published:2023-05-12

摘要/Abstract

摘要：

环签名是一种可为签名者提供无条件匿名保护的特殊数字签名。而可追踪环签名是环签名的一种变体,旨在防止签名者滥用环签名的匿名性,即可追踪环签名为签名者提供的匿名性不是无条件的,在签名者的某些行为下会导致其身份被泄露。可追踪环签名在电子投票系统和电子现金系统中扮演重要角色。针对目前格上可追踪环签名方案基于PKI体制构造,存在复杂的数字证书管理负担,文中将基于身份密码学与格上可追踪环签名相结合,提出第一个格上身份基可追踪环签名方案。与以往可追踪环签名方案不同,所提方案依据Baum等格上可链接环签名方案的框架,采用原像取样和拒绝采样等技术构造,避免使用臃肿的零知识证明技术。随机预言模型下,所提方案可被证明满足标签可链接性、匿名性以及抗陷害性,方案的安全性可规约至SIS和ISIS问题。另外,与相关方案相比,所提方案在时间开销和存储开销上也具有一定优势。

关键词: 格, 基于身份密码学, 可追踪环签名, 小整数解问题

Abstract:

The ring signature is a special digital signature that can provide unconditional anonymous protection for signers,and a traceable ring signature is a variant of the ring signature,which aims to prevent signers from abusing the anonymity of the ring signature,that is,the anonymity provided by the traceable ring signature for signers is not unconditional,which will lead to the identity of signers being disclosed under certain behaviors of the signer.The traceable ring signature plays an important role in an electronic voting system and an electronic cash system.Aiming at the present situation that traceable ring signature schemes on lattice are based on the PKI system and have a complex burden of digital certificate management,this paper combines identity-based cryptography with the traceable ring signature on lattice and proposes the first identity-based traceable ring signature scheme on the lattice.Different from the previous traceable ring signature schemes,the proposed scheme is constructed according to the framework of Baum et al.’s linkable ring signature scheme on lattice and based on the techniques of preimage sampling and reject sampling,etc.,thus avoiding the use of cumbersome zero-knowledge proofs.Under the random oracle model,it is proved that the proposed scheme can meet the tag-linkability,anonymity and exculpability,and that the security can be reduced to SIS and ISIS problems.In addition,compared with the related schemes,the proposed scheme also has some advantages in time overhead and storage overhead.

Key words: lattice, identity-based cryptography, traceable ring signature, small integer solution problem

中图分类号:

TP309

叶青,陈晴晴,豆永鹏,张静,汤永利. 格上身份基可追踪环签名方案[J]. 西安电子科技大学学报, 2023, 50(2): 161-168.

YE Qing,CHEN Qingqing,DOU Yongpeng,ZHANG Jing,TANG Yongli. Identity-based traceable ring signature scheme on lattice[J]. Journal of Xidian University, 2023, 50(2): 161-168.

图/表 2

参考文献 16

[1]	RIVEST R L, SHAMIR A, TAUMAN Y. How to Leak a Secret[C]//Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security. Heidelberg:Springer, 2001:552-565.
[2]	LIU J K, WEI V K, WONG D S. Linkable Spontaneous Anonymous Group Signature for Ad Hoc Groups[C]//Proceedings of 9th Australasian Conference on Information Security and Privacy. Heidelberg:Springer, 2004:325-335.
[3]	FUJISAKI E, SUZUKI K. Traceable Ring Signature[C]//Proceedings of the 10th International Workshop on Public Key Cryptography. Heidelberg:Springer, 2007:181-200.
[4]	TEAGUE V. Which E-Voting Problems Do We Need to Solve?[C]//Proceedings of the 41st Annual International Cryptology Conference. Heidelberg:Springer, 2021:3-7.
[5]	李雪莲, 张夏川, 高军涛, 等. 支持属性和代理重加密的区块链数据共享方案[J]. 西安电子科技大学学报, 2022, 49(1):1-16.
	LI Xuelian, ZHANG Xiachuan, GAO Juntao, et al. Blockchain Data Sharing Scheme Supporting Attribute and Proxy Re-Encryption[J]. Journal of Xidian University, 2022, 49(1):1-16.
[6]	杜瑞忠, 王一, 田俊峰. 一种支持动态可验证的密文检索方案[J]. 西安电子科技大学学报, 2022, 49(1):35-46.
	DU Ruizhong, WANG Yi, TIAN Junfeng. Support Dynamic and Verifiable Scheme for Ciphertext Retrieval[J]. Journal of Xidian University, 2022, 49(1):35-46.
[7]	FUJISAKI E. Sub-linear Size Traceable Ring Signatures without Random Oracles[C]//Proceedings of the CT-RSA. Heidelberg:Springer, 2011:393-415.
[8]	AU M H, LIU J K, SUSILO W et al. Secure ID-based Linkable and Revocable-iff-linked Ring Signature with Constant-size Construction[J]. Theoretical Computer Science, 2013, 469:1-14. doi: 10.1016/j.tcs.2012.10.031
[9]	汤永利, 夏菲菲, 叶青, 等. 格上基于身份的可链接环签名[J]. 密码学报, 2020, 8(2):232-247.
	TANG Yongli, XIA Feifei, YE Qing et al. Identity-Based Linkable Ring Signature on Lattice[J]. Journal of Cryptologic Research, 2020, 8(2):232-247.
[10]	TANG Y L, XIA F F, YE Q, et al. Identity-Based Linkable Ring Signature on NTRU Lattice[J/OL].[2022-07-12]. DOI:10.1155/2021/9992414. doi: 10.1155/2021/9992414
[11]	LE H Q, VO B, DUONG D H, et al. Identity-Based Linkable Ring Signatures from Lattices[J]. IEEE Access, 2021, 9(9):84739-84755. doi: 10.1109/ACCESS.2021.3087808
[12]	BAUM C, LIN H, OECHSNER S. Towards Practical Lattice-Based One-Time Linkable Ring Signatures[C]//Proceedings of the 20th International Conference on Information and Communications Security. Heidelberg:Springer, 2018:303-322.
[13]	FENG H W, LIU J W, LI Y N, et al. Traceable Ring Signatures:General Framework and Post-quantum Security[J]. Designs,Codes and Cryptography, 2021, 89(6):1111-1145. doi: 10.1007/s10623-021-00863-x
[14]	GENTRY C, PEIKERT C, VAIKUNTANATHAN V. Trapdoors for Hard Lattices and New Cryptographic Constructions[C]// Proceedings of the 40thAnnual ACM Symposium on Theory of Computing. New York: ACM, 2008:197-206.
[15]	LYUBASHEVSKY V. Lattice Signatures without Trapdoors[C]//Proceedings of the 31st Annual International Conference on the Theory and Applications of Cryptographic Techniques. Heidelberg:Springer, 2012:738-755.
[16]	POINTCHEVAL D, STERN J. SecurityArguments for Digital Signatures and Blind Signatures[J]. Journal of Cryptology, 2000, 13:361-396. doi: 10.1007/s001450010003

方案	系统密钥生成	用户密钥生成	签名生成	签名验证	LRS/TRS
文献[9]	T_TG	T_SP	(2N+1)T₁+NT_SD+T_RS	2NT₁	LRS
文献[11]	T_TG	T_DT+T_SP	2(N+1)T₁+NT_SD+T_RS	2NT₁	LRS
文中方案	T_TG	T_SP	(2N+1)T₁+NT_SD+T_RS	2NT₁	TRS

方案	用户公钥长度	用户私钥长度	签名长度
文献[9]	n log q	m log(12s)	n log q+(m+1)N log(12σ)
文献[11]	n² log(2q)log q	(m+n log(2q))n log(12s)	n² log q+(m+n log(2q)+n)N log(12σ)
文中方案	n log q	m log(12s)	n log q+mN log(12σ)

格上身份基可追踪环签名方案

Identity-based traceable ring signature scheme on lattice

RichHTML

PDF (PC)

赞

可视化

摘要/Abstract

引用本文

使用本文

图/表 2

参考文献 16

相关文章 15

Metrics

本文评价

推荐阅读 10

[1]	赵斯晗,魏兵,何欣波. 局部特征值解的无条件稳定FDTD高效实施方案[J]. 西安电子科技大学学报, 2022, 49(1): 188-193.
[2]	蒋林,冯茹,邓军勇,李远成. BC算法性能与图数据格式的关系特性分析[J]. 西安电子科技大学学报, 2021, 48(6): 57-66.
[3]	刘欣,李金泽,孙浩. 采用多模光纤级联布拉格光栅的温湿度传感器[J]. 西安电子科技大学学报, 2020, 47(3): 92-96.
[4]	王剑书,樊养余,杜瑞,吕国云. 一种用于矩形阵列的二维波达方向估计方法[J]. 西安电子科技大学学报, 2019, 46(4): 122-129.
[5]	郭松鸽;吕东辉;任艳丽. 一种改进的(k, n)标记视觉密码方案[J]. 西安电子科技大学学报, 2018, 45(5): 170-176+183.
[6]	闫玺玺;刘媛;李子臣;汤永利;叶青. 利用LWE问题构造的多机构属性基加密方案[J]. 西安电子科技大学学报, 2018, 45(4): 129-136.
[7]	张永强;刘佳南;田海博. 满足便携文档格式的公平多方合同签署协议[J]. 西安电子科技大学学报, 2018, 45(1): 117-122.
[8]	冯立康;侯蓉晖. 联合eICIC和CoMP的小蜂窝网络干扰管理机制[J]. 西安电子科技大学学报, 2017, 44(5): 32-38.
[9]	娄利飞;王东洋;潘青彪;张军琴. 十字形石墨烯纳米结的电子输运特性[J]. 西安电子科技大学学报, 2017, 44(5): 87-91+120.
[10]	孙越;冯象初;李小平;张瑞. 接触问题的增广拉格朗日块体粘接模型[J]. 西安电子科技大学学报, 2017, 44(4): 34-39.
[11]	任衍青;逯志宇;巴斌;王大鸣. 锐化遗传直接定位快速估计算法[J]. 西安电子科技大学学报, 2017, 44(4): 144-150.
[12]	方小星;朱志宇;张明新;李阳. 雷达波对孔缝腔体内复杂传输线耦合影响[J]. 西安电子科技大学学报, 2016, 43(6): 135-140.
[13]	杨鑫;魏兵. 一种射线跟踪建模的新方法[J]. 西安电子科技大学学报, 2016, 43(3): 73-77.
[14]	刘巧红;李斌;林敏. 非凸混合总变分图像盲复原[J]. 西安电子科技大学学报, 2016, 43(2): 120-125.
[15]	王伟;李勇朝;张海林. 一种低复杂度的MIMO正交缺陷门限减格预编码算法[J]. J4, 2015, 42(5): 1-6+32.