|国家科技期刊平台
首页|期刊导航|信息安全研究|基于格的访问控制加密技术研究

基于格的访问控制加密技术研究OACSTPCD

Research on the Lattice-based Access Control Encryption Technology

中文摘要英文摘要

访问控制加密(access control encryption,ACE)是一种新颖的公钥加密概念,不仅可以保护数据的机密性,还实现了信息流向的控制.早期基于DDH(decisional Diffie-Hellman)假设的方案(DDH方案)存在密文泄露攻击且仅满足选择明文攻击(chosen plaintext attack,CPA)安全,针对此类问题,密码学家提出了访问控制加密选择密文攻击(chosen ciphertext attack,CCA)安全性定义,并基于Naor-Yung的构造策略构造了 CCA安全的方案.但密码学家未修补DDH方案的安全瑕疵,且其CCA方案存在效率较低、构造复杂、通信策略受限等不足.将DDH方案进行了通用化设计,并以高效的方式修补了 DDH方案遭受密文攻击的瑕疵,进一步,构造了 CCA安全的访问控制加密方案,具有高效、设计简单、基于标准困难性假设的特点.最后,分别基于格上困难性假设和判定性双线性 Diffie-Hellman(decisional binlinear Diffie-Hellman,DBDH)假设,给出 了 2 种 CCA 安全方案的实例化设计.

Access Control Encryption is a novel public-key encryption concept.It can not only protect the confidentiality of data,but also realize the control of information direction.The early scheme based on the DDH(decisional Diffie-Hellman)assumption suffers from the ciphertext leakage attack and only satisfies the chosen plaintext attack(CPA)security.For such problems,cryptologists proposed a security definition of the chosen ciphertext attack(CCA)and constructed a CCA security scheme based on Naor-Yung construction strategy.However,cryptologists have not fixed the security flaw of the DDH scheme,and their CCA scheme has shortcomings such as the low efficiency,complex construction and limited communication strategy.In this paper,the DDH scheme is designed generically,and the flaw of the DDH scheme subjected to the ciphertext leakage attack is remedied in an efficient way.Furthermore,a CCA secure access control encryption scheme is constructed,which is efficient,simple in design and based on the standard difficulty assumption.Finally,based on the lattice difficulty assumption and the decisional bilinear Diffie-Hellman(DBDH)assumption respectively,two kinds of CCA security schemes are instantiated.

谭高升;李伟;马静静;王伟忠;邢建华;马明杰

北京京航计算通讯研究所 北京 100074军事科学院系统工程研究院 北京 100101中国工业互联网研究院 北京 100102

计算机与自动化

访问控制加密CCA安全性高效标准假设

access control encryptionCCA securityefficientlatticestandard assumption

《信息安全研究》 2024 (004)

318-324 / 7

工业和信息化部2021年产业技术基础公共服务平台项目(2021-H026-1-1)

10.12379/j.issn.2096-1057.2024.04.05

评论