Post-quantum identity signature generation verification method and system based on symmetric cryptographic primitives

Abstract

This invention relates to a post-quantum identifier signature generation method and system based on symmetric cryptographic primitives. First, based on given security parameters, a master key is obtained, including a master public key and a master private key. Then, based on a given user identity and the master private key, a user private key is generated. Based on the generated user private key and the message, a signature value is obtained. Finally, a verifier performs a zero-knowledge proof on the signature value based on the given message; if successful, the signature is correct; otherwise, the signature is incorrect. Compared with existing technologies, this invention has the following advantages and beneficial effects: With the development of post-quantum signature technology, scholars have proposed lattice-based signature algorithms and homology-based signature algorithms, but no one has yet proposed a post-quantum identifier signature based on symmetric cryptographic primitives. It offers high security, relying on the security of symmetric cryptographic algorithms, without relying on difficult problems such as the RSA problem to construct the signature, requiring fewer cryptographic primitives and offering higher security. The generation of this identifier signature meets post-quantum security requirements.

Description

Technical Field

[0001] This invention belongs to the field of information security technology, specifically a post-quantum identifier signature generation method and system based on symmetric cryptographic primitives. Background Technology

[0002] Digital signature technology is a cryptographic tool used to protect the integrity, authenticity, and non-repudiation of user identity information. With the increasing prevalence of internet applications, scenarios requiring the authentication of internet users are constantly emerging; therefore, digital signature technology is widely used in various internet scenarios across different fields.

[0003] ID-based signature is a signature algorithm that differs from traditional public-key certificate-based systems. Its basic idea is to bind a user's identity identifier (ID) to their private key for signing. This eliminates the need for a Certificate Authority (CA) to issue certificates and perform authentication for the public key, thus removing the security vulnerabilities inherent in certificate systems. Furthermore, the user's identity can serve as the public key, making it more practical.

[0004] Post-quantum signatures based on symmetric cryptographic primitives fall under the category of public-key cryptography. Theoretically, digital signatures can be constructed using only a one-way function and zero-knowledge proofs, without requiring difficult problems like the RSA problem to construct trapdoors or other tools. The Picnic and SPHINCS+ algorithms, among the third round of candidates in the National Institute of Standards and Technology (NIST)'s post-quantum cryptographic algorithm standard selection process, both rely solely on symmetric cryptographic algorithms and hash functions to construct digital signatures. They utilize the most secure and conservative cryptographic primitives and represent a novel type of post-quantum signature algorithm. Summary of the Invention

[0005] The technical problem to be solved by this invention is to address the shortcomings of the existing technology by proposing a post-quantum identifier signature generation method and system based on symmetric cryptographic primitives, which is described in detail below.

[0006] This invention presents a post-quantum identifier-based signature generation method and system based on symmetric cryptographic primitives. A post-quantum identifier signature scheme is constructed based on the NIST candidate signature scheme Picnic.

[0007] A post-quantum identifier signature algorithm based on symmetric cryptographic primitives is proposed, using non-interactive zero-knowledge proofs (ZKB++) for scheme construction. First, a Diffie-Hellman tuple zero-knowledge proof is initialized:

[0008]

[0009] in It is a symmetric encryption algorithm. In this zero-knowledge proof protocol... For secret input (i.e.) witness ), The encrypted output for symmetric cryptography is used as the public input.

[0010] The specific symbols are described below:

[0011] One-way function family based on symmetric cryptography .

[0012] Master private key.

[0013] : Master public key.

[0014] : Master private key secret value.

[0015] , Zero-knowledge proof.

[0016] : A user's identifiable identifier.

[0017] Message awaiting signature.

[0018] : Signature value.

[0019] , : The internal challenge value of zero-knowledge proof.

[0020] The specific technical solution adopted is as follows:

[0021] Post-quantum identifier signature generation and verification methods based on symmetric cryptographic primitives include:

[0022] Based on the given security parameters, obtain the master key, including the master public key and the master private key;

[0023] Based on the given user identity Master private key, generate user private key;

[0024] Based on the generated user private key and message, obtain the signature value;

[0025] The verifier performs a zero-knowledge proof on the signature value based on the given message. If the proof passes, the signature is correct; otherwise, the signature is incorrect.

[0026] The above-mentioned method for generating and verifying post-quantum identifier signatures based on symmetric cryptographic primitives,

[0027] Based on given security parameters Random selection Randomly select the secret value of the master private key. ,in The distribution of secret values;

[0028] Calculate the encrypted output of the symmetric cryptography , and as a public parameter;

[0029] Get Including the master public key Master private key .

[0030] In the aforementioned post-quantum identifier signature generation and verification method based on symmetric cryptographic primitives, based on the given user identity... Master private key Output user private key :

[0031] Parsing the master private key for Calculate the master private key secret value Zero-knowledge proof The internal challenge value ;

[0032] Output user private key .

[0033] The above-mentioned method for generating and verifying post-quantum identifier signatures based on symmetric cryptographic primitives,

[0034] Calculate user private key Zero-knowledge proof The internal challenge value

[0035] Output signature value .

[0036] The above-mentioned method for generating and verifying post-quantum identifier signatures based on symmetric cryptographic primitives,

[0037] verify The internal challenge value ;

[0038] If the verification is successful, the signature is correct; otherwise, the signature is incorrect.

[0039] A post-quantum identifier signature generation and verification system based on symmetric cryptographic primitives includes:

[0040] The first module is configured to obtain the master key, including the master public key and the master private key, based on the given security parameters.

[0041] The second module: is configured to act based on a given user identity. Master private key, generate user private key;

[0042] The third module is configured to obtain the signature value based on the generated user private key and the message.

[0043] The fourth module is configured to perform a zero-knowledge proof on the signature value based on the given message. If the proof is successful, the signature is correct; otherwise, the signature is incorrect.

[0044] In the aforementioned post-quantum identifier signature generation and verification system based on symmetric cryptographic primitives,

[0045] Based on given security parameters Random selection Randomly select the secret value of the master private key. ,in The distribution of secret values;

[0046] Calculate the encrypted output of the symmetric cryptography , and as a public parameter;

[0047] Get Including the master public key Master private key .

[0048] In the aforementioned post-quantum identifier signature generation and verification system based on symmetric cryptographic primitives, according to the given user identity... Master private key Output user private key :

[0049] Parsing the master private key for Calculate the master private key secret value Zero-knowledge proof The internal challenge value ;

[0050] Output user private key .

[0051] In the aforementioned post-quantum identifier signature generation and verification system based on symmetric cryptographic primitives,

[0052] Calculate user private key Zero-knowledge proof The internal challenge value ;

[0053] Output signature value .

[0054] In the aforementioned post-quantum identifier signature generation and verification system based on symmetric cryptographic primitives,

[0055] verify The internal challenge value ;

[0056] If the verification is successful, the signature is correct; otherwise, the signature is incorrect.

[0057] Compared with existing technologies, this invention has the following advantages and beneficial effects: 1. With the development of post-quantum signature technology, scholars have proposed lattice-based signature algorithms and homology-based signature algorithms, but no one has yet proposed a post-quantum identifier signature based on symmetric cryptographic primitives. 2. High security: Its security depends on the security of the symmetric cryptographic algorithm, but it does not rely on difficult problems such as the RSA problem to construct the signature. It uses fewer cryptographic primitives and has higher security. 3. The generation of this identifier signature meets the post-quantum security requirements. Attached Figure Description

[0058] Appendix Figure 1 This is a schematic diagram of the method flow of the present invention. Detailed Implementation

[0059] The technical solution of the present invention will be further described in detail below through embodiments and in conjunction with the accompanying drawings.

[0060] Example:

[0061] The specific symbols are described below:

[0062] One-way function family based on symmetric cryptography .

[0063] Master private key.

[0064] : Master public key.

[0065] : Master private key secret value.

[0066] , Zero-knowledge proof.

[0067] : A user's identifiable identifier.

[0068] Message awaiting signature.

[0069] : Signature value.

[0070] , : The internal challenge value of zero-knowledge proof.

[0071] The specific process is as follows:

[0072] 1. System Initialization: Given Security Parameters Perform the following steps:

[0073] a random selection Randomly select the secret value of the master private key. ,in Given the distribution of the secret value, calculate the encryption output of the symmetric cipher. And as a public parameter.

[0074] b command public key , master private key return .

[0075] 2. Key Extraction: Given user identity Master private key Output user private key :

[0076] a analyzes the master private key for Calculate the master private key secret value Zero-knowledge proof The internal challenge value .

[0077] b Output the user's private key .

[0078] 3. Signature: Given to user private key ,information Output signature value :

[0079] a calculate user private key Zero-knowledge proof The internal challenge value .

[0080] b Output signature value .

[0081] 4. Validation: Given a message signature value The verifier performs the following steps:

[0082] A verification The internal challenge value .

[0083] If the above verification is true, the signature is correct; otherwise, it is incorrect.

[0084] The specific embodiments described herein are merely illustrative of the spirit of the invention. Those skilled in the art to which this invention pertains may make various modifications or additions to the described specific embodiments or use similar methods to substitute them, without departing from the spirit of the invention or exceeding the scope defined by the appended claims.

Claims

1. A method for post-quantum identity signature generation and verification based on symmetric cryptographic primitives, characterized in that, The security dependence of the method depends on the security of the symmetric cipher algorithm and does not depend on the construction of the difficult problem signature, comprising: According to the given security parameter, the master key is obtained, including the master public key and the master private key; According to a given user identity , a master private key, generating a user private key; According to the generated user private key and the message, the signature value is obtained; The verifier proves the signature value according to the given message, and if it passes, the signature is correct; Otherwise, the signature is wrong. According to given security parameters , randomly select , a secret value of a master private key wherein is a distribution of secret values; Computing encryption output of symmetric cipher and as a public parameter; Acquisition , including a master public key , a master private key ; According to the given user identity , the master private key , output the user private key : Resolving the master private key For , calculating the zero-knowledge proof of the master private key secret value , wherein the challenge value inside ;​ Output user private key ; Computing a user private key Proof of zero knowledge where the challenge value Output signature value .

2. The post-quantum identity signature generation and verification method based on symmetric cipher primitives according to claim 1, characterized in that, authentication wherein the internal challenge value ; If the verification is correct, the signature is correct; Otherwise, the signature is wrong.

3. A post-quantum identity signature generation and verification system based on symmetric cryptographic primitives for implementing the post-quantum identity signature generation and verification method according to any one of claims 1-2, characterized in that, Comprising: The first module is configured to obtain the master key according to the given security parameter, including the master public key and the master private key; The second module is configured to generate a user private key according to a given user identity, a master private key, and a random number. , the master private key, and a random number. The third module is configured to obtain the signature value according to the generated user private key and the message; The fourth module is configured to prove the signature value according to the given message, and if it passes, the signature is correct; Otherwise, the signature is wrong.

4. The post-quantum identity signature generation and verification system based on symmetric cipher primitives according to claim 3, characterized in that, According to given security parameters , randomly select , a secret value of the master private key , wherein is a distribution of the secret value; Computing encryption output of symmetric cipher and as a public parameter; Acquisition , including a master public key , a master private key .

5. The post-quantum identity signature generation and verification system based on symmetric cryptographic primitives according to claim 3, wherein, According to the given user identity , the master private key , the output user private key : Resolving the master private key For , calculating the zero-knowledge proof of the master private key secret value , wherein the challenge value inside ;​ Output user private key .

6. The post-quantum identity signature generation and verification system based on symmetric cipher primitives according to claim 3, characterized in that, Computing a user private key Proof of zero knowledge where the challenge value is internal Output signature value .

7. The post-quantum identity signature generation and verification system based on symmetric cipher primitives according to claim 3, characterized in that, authentication wherein the internal challenge value ; If the verification is correct, the signature is correct; Otherwise, the signature is wrong.

Images