Lattice Signature Memory Using High-Order Public Key Bits
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Lattice-based cryptography systems face memory inefficiencies due to large public keys, particularly in devices with limited memory, as they require storing both high-order and low-order bits of the public key, which increases memory requirements and complicates secure key handling.
Innovation Solution
A method is introduced to generate lattice-based signatures using only the high-order bits of the public key, computing hints based on verification, and omitting the low-order bits, thus reducing memory requirements by storing only the high-order bits locally.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If t0 is stored locally to compute hints during signing, then signature validity is ensured, but memory usage increases significantly
Solution Approach 1:
The public key element t is segmented into two parts: t1 (high-order bits) and t0 (low-order bits). Only t1 is stored locally and used for hint computation, while t0 is omitted from local storage. This segmentation allows the system to maintain signature validity using only the essential high-order bits, reducing memory usage by eliminating the need to store the low-order bits t0.
Solution Approach 2:
The essential component t1 (high-order bits) is extracted and retained for local storage and hint computation, while the non-essential component t0 (low-order bits) is removed from local storage. This extraction principle enables the system to function correctly with minimal local storage requirements, as t1 alone suffices for computing hints during signing operations.
2Ease of operation
If both t0 and t1 are stored locally, then all signing operations can be performed, but memory efficiency is reduced
Solution Approach 1:
The system extracts and retains only the essential component t1 for local storage, removing the redundant t0 from local storage. This extraction maintains full signing capability because t1 contains all necessary information for hint computation, while eliminating unnecessary memory consumption associated with storing t0.
Solution Approach 2:
The system applies local quality by assigning different roles to different parts of the public key: t1 (high-order bits) is designated for local storage and active use in signing operations, while t0 (low-order bits) is designated for omission from local storage. This differentiated allocation optimizes memory usage while preserving signing functionality.
Data Source
AI summary
Generating a lattice-based signature includes: determining an uncorrected signature; determining hints based on a verification of the uncorrected signature, and providing the uncorrected signature and the hints as a lattice-based signature.