arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv cs/0702046cs.CRcs.CC
收藏

REESSE1 +公钥密码体制v2的设计与分析.21

Design and Analysis of the REESSE1+ Public Key Cryptosystem v2.21

Shenghui Su, Shuwang Lv

摘要:

本文给出了互质序列和杠杆函数的定义,描述了一个用于加密和签名的原型公钥密码体制的五种算法和六个特征,并基于三个新问题和一个存在问题:多变量置换问题(MPP),异常子集积问题(ASPP),超越对数问题(TLP),多项式求根问题(Polynomial Root Finding Problem,PRFP)通过约化证明了MPP、ASPP和TLP在计算上至少等价于同一素数域上的离散对数问题(DLP),同时找到了一些证据,使人们倾向于认为新问题比DLP更难,即在DLP次指数时间内不可解。证明解密和验证的正确性,推导出明文解不唯一的概率几乎为零,并在假设IFP、DLP和LSSP可解的情况下,分析密码系统的确切安全性,以防止从密文中恢复明文,从公钥或签名中提取私钥,以及通过已知的签名、公钥和消息伪造签名。研究表明,当n = 80、96、112或128,lgM = 696、864、1030或1216时,有效攻击任务的运行时间大于或等于O(2^n)。从实用性的角度来看,如何减小模的长度,提高解密速度,还有待进一步研究。

英文摘要:

In this paper, the authors give the definitions of a coprime sequence and a lever function, and describe the five algorithms and six characteristics of a prototypal public key cryptosystem which is used for encryption and signature, and based on three new problems and one existent problem: the multivariate permutation problem (MPP), the anomalous subset product problem (ASPP), the transcendental logarithm problem (TLP), and the polynomial root finding problem (PRFP). Prove by reduction that MPP, ASPP, and TLP are computationally at least equivalent to the discrete logarithm problem (DLP) in the same prime field, and meanwhile find some evidence which inclines people to believe that the new problems are harder than DLP each, namely unsolvable in DLP subexponential time. Demonstrate the correctness of the decryption and the verification, deduce the probability of a plaintext solution being nonunique is nearly zero, and analyze the exact securities of the cryptosystem against recovering a plaintext from a ciphertext, extracting a private key from a public key or a signature, and forging a signature through known signatures, public keys, and messages on the assumption that IFP, DLP, and LSSP can be solved. Studies manifest that the running times of effectual attack tasks are greater than or equal to O(2^n) so far when n = 80, 96, 112, or 128 with lgM = 696, 864, 1030, or 1216. As viewed from utility, it should be researched further how to decrease the length of a modulus and to increase the speed of the decryption.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑