论文部分内容阅读
在随机Oracle模型的基础上,提出一种基于单向陷门置换(trapdoor permutations,TDPs)的、可并行的、长消息签密方案——PLSC(parallel long-message signcryption).该方法采用“整体搅乱,局部加密(scramble all,and encrypt small)”的思想,用一个伪随机数对要传送的消息和用户的身份(ID)进行“搅乱(scrambling operation)”,然后对两个固定长度的小片段(并行地)进行单向陷门置换(TDP)操作.这种设计使得整个方案可直接高效地处理任意长度的消息,既可避免循环调用单向陷门置换(如CBC模式)所造成的计算资源的极度消耗,也可避免由“对称加密方案”与“签密方案”进行“黑盒混合(black-box hybrid)”所造成的填充(padding)冗余.不仅可以显著地节约消息带宽,而且可以显著地提高整体效率.具体地说,该方法对任何长度的消息进行签密,仅需进行一次接收方的TDP运算(相当于加密),以及一次发送方的TDP运算(相当于签名),从而最大限度地降低了TDP运算的次数,提高了整体的运算效率.因为,对于公钥加密算法来说,运算量主要集中在TDP运算上,TDP运算是整个算法的瓶颈所在.另一方面,由于避免了填充上的冗余,新方案的效率也高于标准的“黑盒混合”方案.重要的是,新方案能够达到选择密文攻击下的紧致的语义安全性(IND-CCA2)、密文完整性(INT-CTXT)以及不可否认性(non-repudiation).而且所有这些安全要求都可以在多用户(multi-user)、内部安全(insider-security)的环境下得以实现.另外,尽管新方案主要针对长消息的签密,但它也可应用于某些不能进行大块数据处理的环境(智能卡或其他只有少量内存的环境).也就是说,对于这些小内存设备来说,仍然可以用该方案来实现长消息的签密处理.
Based on the stochastic Oracle model, a parallel long-message signcryption (PLSC) scheme based on one-way trapdoor permutations (TDPs) is proposed, which can be used in parallel Scramble all, and encrypt small, “scrambling operation of the message to be transmitted and the user’s identity (ID) with a pseudo-random number, and then the two fixed-length small Fragment (in parallel) for one-way trapped door replacement (TDP) operation.This design allows the entire program can be directly and efficiently deal with any length of the message, to avoid circular call one-way trap replacement (such as CBC mode) caused by Calculating extreme resource consumption can also avoid padding redundancy caused by ”black-box hybrid“ between ”symmetric encryption scheme“ and ”signcryption scheme.“ Not only can the message bandwidth be significantly saved , But also can significantly improve the overall efficiency.More specifically, the method of any length of message signcryption, only one receiver’s TDP operation (equivalent to encryption), as well as a sender’s TDP operation (Equivalent to signature), thus minimizing the number of TDP operations, improve the overall efficiency of the operation.Because, for the public key encryption algorithm, the computation is mainly concentrated in the TDP operation, TDP operation is the entire algorithm Bottlenecks.On the other hand, the new scheme is also more efficient than the standard ”black-box hybrid" scheme due to the avoidance of padding redundancy.Importantly, the new scheme can achieve the compact semantics of choosing ciphertext attacks Security (IND-CCA2), ciphertext integrity (INT-CTXT) and non-repudiation. And all of these security requirements are available in multi-user, insider-security, .In addition, although the new scheme is mainly aimed at signing long messages, it can also be applied to some environments that can not handle large data (smart cards or other environments with only a small amount of memory.) That is, For these small memory devices, this scheme can still be used to sign long messages.