用于协同自动驾驶中高效后量子消息认证的零知识签名框架
A Zero-Knowledge Signature Framework for Efficient Post-Quantum Message Authentication in Cooperative Automated Driving
浏览论文内容
中文总结 AI 辅助
本文提出ZKS-PQC零知识签名框架，通过用零知识证明替代后量子签名的完整认证材料，大幅减少V2X通信开销，为CAV系统提供实用的抗量子消息认证迁移策略。
中文摘要 AI 辅助
网联自动驾驶车辆（CAV）依赖经过认证的车万物联网（V2X）通信，在车辆与路边基础设施间交换安全关键信息。随着汽车行业向後量子密码学（PQC）过渡，标准化PQC数字签名算法的公钥和签名显著更大，带来了巨大的通信开销，这对基于证书的V2X认证的可扩展性构成挑战，尤其是对于高频协同感知消息（CAM）。本文提出ZKS-PQC，一种零知识签名框架，可为协同V2X系统实现通信高效的后量子消息认证。该框架不传输完整的后量子公钥和签名，而是用紧凑的零知识证明（ZKP）替代这些认证材料，同时保留与现有基于证书的信任架构的兼容性。此方法支持向传统ECDSA的增量迁移和向后兼容性。该框架使用Open Quantum Safe（liboqs）和ZKP（Bulletproofs）库实现，我们评估了标准化NIST PQC签名算法及其他候选算法的性能。在Linux平台和商用车载单元（OBU）上的实验验证表明，所有算法的消息大小均减少了95%以上，同时在发送方和接收方处，多数算法的额外处理开销保持在毫秒级，符合实时V2X操作的延迟要求。通过将通信开销与后量子签名算法的大小特性解耦，ZKS-PQC为未来CAV系统中可扩展、抗量子的消息认证提供了实用的迁移策略。
英文摘要
Connected and Automated Vehicles (CAV) rely on authenticated Vehicle-to-Everything (V2X) communications to exchange safety-critical information among vehicles and roadside infrastructure. As the automotive industry transitions toward post-quantum cryptography (PQC), the significantly larger public keys and signatures of standardized PQC digital signature algorithms introduce substantial communication overhead, which challenges the scalability of certificate-based V2X authentication, particularly for high-frequency cooperative awareness messages (CAM). This paper presents ZKS-PQC, a zero-knowledge signature framework that enables communication-efficient post-quantum message authentication for cooperative V2X systems. Instead of transmitting complete post-quantum public keys and signatures, the proposed framework replaces this authentication material with a compact Zero-Knowledge Proof (ZKP) while preserving compatibility with existing certificate-based trust architectures. This approach supports incremental migration and backward compatibility with the legacy ECDSA. The framework is implemented using the Open Quantum Safe (liboqs) and ZKP (Bulletproofs) libraries, and we evaluated the performance of standardized NIST PQC signature algorithms and additional candidate algorithms. Experimental validation on both a Linux platform and a commercial On-Board Unit (OBU) demonstrates substantial reductions in message size exceeding 95% for all algorithms, while limiting additional processing overhead by staying within the order of milliseconds at both sender and receiver in many algorithms, consistent with the latency requirements of real-time V2X operation. By decoupling communication overhead from the size characteristics of post-quantum signature algorithms, ZKS-PQC offers a practical migration strategy for scalable, quantum-resilient message authentication in future CAV systems.
发表机构
- COSIC, KU Leuven（KU鲁汶大学COSIC）
机构由 AI 辅助整理，请以论文原文为准。
