密码学报（中英文）2025，Vol.12Issue(3)：489-498,10.DOI:10.13868/j.cnki.jcr.000776
抗泄露公钥密码泄露长度分析
Leakage Length Analysis of Leakage-Resilient PKE
摘要
Abstract
The purpose of leakage-resilient cryptosystems is to maintain the security of cryptography scheme in case of leakage of secret key.The first leakage-resilient public key encryption(PKE)scheme was constructed in NS09(Crypto 2009)from weak hash proof system(wHPS)and strong extractor in bounded-leakage model.Based on this,wHPS scheme was constructed from a general PKE scheme and the construction was realized of leakage-resilient PKE from the general PKE in HLW+13(Eurocrypt 2013).The optimal leakage rate was gained in LLW22(PKC 2022)by introducing an attribute-based encryption.Nevertheless,the description of leakage bound in HLW+13 and LLW22 is not detailed enough and the leakage rate is only given as an asymptotic expression without specific analysis.This study analyzes the leakage length and leakage rate of these two schemes and discusses them in detail.Firstly,the two schemes are restated based on wHPS.The leakage-resilient PKE scheme in HLW+13 is simplified by wHPS,and the attribute-based wHPS in LLW22 is simplified to wHPS.Secondly,the leakage bound of the schemes is derived in detail.Finally,the leakage rate is analyzed in detail according to the parameters of the current PKE schemes.These two leakage-resilient PKE schemes are instantiated by using Kyber-256PKE scheme and BGG+14 attribute-based encryption scheme,and their leakage rates are numerically analyzed.It is found that the underlying encryption algorithm need to be repeated too many times(up to 10 000)when constructing wHPS in LLW22 in order to achieve the actual required leak resistance(for example 10%),and reducing the secret key size of the underlying ABE scheme is the key to reducing the number of execution.关键词
公钥加密/抗泄露/泄露长度/泄露率Key words
public key encryption/leakage-resilient/leakage bound/leakage rate分类
信息技术与安全科学引用本文复制引用
董星廷,韦永壮,刘沫萌,高雯..抗泄露公钥密码泄露长度分析[J].密码学报（中英文）,2025,12(3):489-498,10.基金项目
广西可信软件重点实验室研究课题(kx202204) （kx202204）
广西自然科学基金(2019GXNSFGA245004,2023GXNSFBA026136) （2019GXNSFGA245004,2023GXNSFBA026136）
陕西省自然科学基础研究计划(2024JC-YBMS-475) （2024JC-YBMS-475）
陕西省教育厅青年创新团队科研计划(23JP058) （23JP058）
空天地一体化综合业务网全国重点实验室开放基金(ISN25-13)Research Fund of Guangxi Key Laboratory of Trusted Software(kx202204) （ISN25-13）
Guangxi Natural Science Foundation(2019GXNSFGA245004,2023GXNSFBA026136) （2019GXNSFGA245004,2023GXNSFBA026136）
Natural Science Basic Research Program of Shaanxi Province(2024JCYBMS-475) （2024JCYBMS-475）
Scientific Research Program of Shaanxi Provincial Education Department(23JP058) （23JP058）
Open Project of State Key Laboratory of Integrated Services Networks(ISN25-13) （ISN25-13）
