明文编码随机化加密方案

发布时间：2018-01-29 14:01

本文关键词： 标准模型不可区分安全自适应选择密文攻击编码随机化 RSA-OAEP　出处：《软件学报》2017年02期 　论文类型：期刊论文

【摘要】：对著名的最优非对称填充加密方案(RSA-OAEP)及其改进方案进行分析发现:(1)这些方案的明文填充机制均采用Hash函数来隐藏明文统计特性,然而Hash函数特有的属性导致RSA-OAEP及其改进方案的安全性证明难以在标准模型下进行.很多研究工作表明,在标准模型下假定RSA(或者其变形)是困难的,无法证明RSA-OAEP及其改进方案对自适应性选择密文攻击是安全性的;(2)这些方案加密的消息是明文填充随机化处理后的信息,因此被加密信息比实际明文多出k位(设用于填充的随机数为k位).针对这两个问题,构造了一个基于配对函数编码的RSA型加密方案.该方案具有如下属性:(1)无需Hash运算就可以隐藏明文统计特性,同时使得被加密消息的长度短于实际明文的长度;(2)在标准模型下对自适应选择密文攻击是安全的;(3)该方案应用于签密时不需要额外协商签名模与加密模的大小顺序.
[Abstract]:An analysis of the famous optimal asymmetric padding scheme (RSA-OAEP) and its improved scheme shows that: 1). The plaintext filling mechanism of these schemes uses the Hash function to hide the statistical properties of plaintext. However, the unique properties of Hash function make it difficult to prove the security of RSA-OAEP and its improved scheme under the standard model. It is difficult to assume RSAs (or their variants) in the standard model, and it is impossible to prove that RSA-OAEP and its improved scheme are secure for adaptive selective ciphertext attacks. These schemes encrypt messages that are plain-text filled with randomised information, so the encrypted information is more k-bit than the actual plaintext (set the random number for padding to k bits). For these two problems. A RSA encryption scheme based on pairing function encoding is proposed. The scheme has the following attribute: 1) it can hide the statistical properties of plaintext without Hash operation. At the same time, the length of encrypted message is shorter than that of actual plaintext. 2) in the standard model, it is safe to attack the adaptive selected ciphertext; The scheme is applied to signcryption without additional negotiation of the size order of signature mode and encryption mode.
【作者单位】：陕西师范大学计算机科学学院;清华大学计算机科学与技术系;陕西师范大学数学与信息科学学院;
【基金】：国家自然科学基金(61272435,61373020)~~
【分类号】：TP309.7
【正文快照】： cn/1000-9825/5048.htm英文引用格式:Gong LM,Li SD,Wang DS,Dou JW.Randomized coding of plaintext encryption scheme.Ruan Jian Xue Bao/Journal of Software,2017,28(2):372?383(in Chinese).http://www.jos.org.cn/1000-9825/5048.htmRandomized Coding of Plaintext En

【参考文献】