西安电子科技大学学报 ›› 2023, Vol. 50 ›› Issue (4): 1-10.doi: 10.19665/j.issn1001-2400.2023.04.001

• 网络空间安全专栏 •    下一篇

自适应安全的支持模式匹配的流加密方案

李一鸣1,2(),刘胜利1,2()   

  1. 1.上海交通大学 计算机科学与工程系,上海 200240
    2.密码科学技术全国重点实验室,北京 100878
  • 收稿日期:2023-01-10 出版日期:2023-08-20 发布日期:2023-10-17
  • 通讯作者: 刘胜利
  • 作者简介:李一鸣(1996—),女,上海交通大学博士研究生,E-mail:lym_sjtu@sjtu.edu.cn
  • 基金资助:
    广东省基础与应用基础研究重大项目(2019B030302008);国家自然科学基金(61925207);国家重点研发计划(2022YFB2701500)

Adaptive secure stream encryption supporting pattern matching

LI Yiming1,2(),LIU Shengli1,2()   

  1. 1. Department of Computer Science and Engineering,Shanghai Jiao Tong University,Shanghai 200240,China
    2. State Key Laboratory of Cryptology,Beijing 100878,China
  • Received:2023-01-10 Online:2023-08-20 Published:2023-10-17
  • Contact: Shengli LIU

摘要:

支持模式匹配的流加密方案为同时实现模式匹配以及用户隐私保护提供了解决思路。一方面,支持模式匹配的流加密方案可以对加密后的消息进行模式匹配操作,即通过密文查找某个关键字是否出现在明文中或出现在明文消息的哪些位置;另一方面,支持模式匹配的流加密方案的安全性保证了除模式匹配的结果外,不会泄露关于明文消息的任何额外信息。目前已经有很多关于支持模式匹配的流加密方案的工作,但尚没有支持模式匹配的流加密方案能够同时满足基于非交互式安全假设(特别是基于后量子假设)实现、具有自适应安全性以及支持带通配符的模式匹配。针对这一问题,首先,以函数加密方案为组件提出了一个支持模式匹配的流加密方案的通用构造方案。该通用构造方案具有自适应安全性且支持带通配符的模式匹配;进一步地,使用已有的基于容错学习假设的函数加密方案对支持模式匹配的流加密方案的通用构造方案进行实例化,并由此得到了一个基于非交互式后量子假设(容错学习假设)、具有自适应安全性和支持带通配符模式匹配的流加密实例化方案。

关键词: 公钥密码, 模式匹配, 后量子密码, 自适应安全

Abstract:

The stream encryption supporting pattern matching(SEPM) is a primitive proposed to provide privacy protection while doing pattern matching.On the one hand,one can use the SEPM to perform pattern matching on some ciphertext to find out whether and where a keyword exists in its corresponding plaintext.On the other hand,the security of the SEPM guarantees that no information about the plaintext will be revealed except for the results of pattern matching.Up to now,there have been several constructions of the SEPM,but none of them achieves the adaptive security from non-interactive assumptions(especially post-quantum assumptions),and supports pattern matching with the wildcard simultaneously.In this paper,we propose a new generic construction of the SEPM from a functional encryption(FE),achieving the adaptive security and supporting pattern matching with the wildcard.Further,we instantiate the generic construction of the SEPM by existing learning with error(LWE)-based instantiations of the FE.Finally,an SEPM scheme is obtained which could achieve the adaptive security from a non-interactive and post-quantum assumption (the LWE assumption) and could support pattern matching with the wildcard simultaneously.

Key words: public key cryptography, pattern matching, post-quantum cryptography, adaptive security

中图分类号: 

  • TP309