中国邮电高校学报(英文) ›› 2014, Vol. 21 ›› Issue (6): 52-60.doi: 10.1016/S1005-8885(14)60345-9

• Information Security • 上一篇    下一篇

Identity-based strong designate verifier signature over lattices

王凤和1,胡予濮2,王春晓1   

  1. 1. 山东建筑大学
    2. 西安电子科技大学
  • 收稿日期:2014-04-08 修回日期:2014-07-15 出版日期:2014-12-31 发布日期:2014-12-31
  • 通讯作者: 王凤和 E-mail:xiao2166@126.com
  • 基金资助:

    国家自然科学青年基金;国家自然科学基金面上项目;山东省自然科学青年基金

Identity-based strong designate verifier signature over lattices

  • Received:2014-04-08 Revised:2014-07-15 Online:2014-12-31 Published:2014-12-31
  • Contact: Feng-He WANG E-mail:xiao2166@126.com

摘要:  The notion of the identity-based (id-based) strong designate verifier signature (SDVS) was extent to the lattice-based cryptography. The authors proposed an id-based SDVS scheme over lattices by using the basis delegation technical in fixed dimension. The proposed scheme is based on the hardness of the learning with errors (LWE) problem, and the unforgeability against adaptive chosen message and selective identity attack is based on the hardness of the short integer solution (SIS) problem in the random oracle model. If the parameters m, n and q are the same, the signature length of this scheme is only 3mlbq bits shorter than (3m+n) lb q bits which is the signature length of the known lattice-based SDVS scheme in the public key environment. As a result, the proposed scheme is not only id-based but also efficient about the signature length and the computation cost. Moreover, this article also proposed an id-based strong designate verifier ring signature (SDVRS) scheme based on the proposed SDVS scheme, which satisfies anonimity, unforgeability.

关键词: SDVS, lattice-based cryptography, id-based cryptography, Gaussian sample, SIS problem, LWE problem

Abstract:  The notion of the identity-based (id-based) strong designate verifier signature (SDVS) was extent to the lattice-based cryptography. The authors proposed an id-based SDVS scheme over lattices by using the basis delegation technical in fixed dimension. The proposed scheme is based on the hardness of the learning with errors (LWE) problem, and the unforgeability against adaptive chosen message and selective identity attack is based on the hardness of the short integer solution (SIS) problem in the random oracle model. If the parameters m, n and q are the same, the signature length of this scheme is only 3mlbq bits shorter than (3m+n) lb q bits which is the signature length of the known lattice-based SDVS scheme in the public key environment. As a result, the proposed scheme is not only id-based but also efficient about the signature length and the computation cost. Moreover, this article also proposed an id-based strong designate verifier ring signature (SDVRS) scheme based on the proposed SDVS scheme, which satisfies anonimity, unforgeability.

Key words: SDVS, lattice-based cryptography, id-based cryptography, Gaussian sample, SIS problem, LWE problem