上海第二工业大学计算机与信息工程学院, 人工智能研究院, 上海 201209
[ "胡小明(1978- ),女,浙江慈溪人,上海第二工业大学教授,主要研究方向为密码学、区块链安全及隐私保护。" ]
[ "陈海婵(1998- ),女,广西贵港人,上海第二工业大学硕士生,主要研究方向为区块链隐私保护。" ]
收稿:2023-10-23,
修回:2024-03-12,
纸质出版:2024-04-15
移动端阅览
胡小明, 陈海婵. 可证明安全的SM2盲适配器签名方案[J]. 网络与信息安全学报, 2024, 10(02): 59-68.
Format: HU X M, CHEN H C. Proven secure blind adaptor signature scheme based on the SM2[J]. Chinese Journal of Network and Information Security, 2024, 10(02): 59-68.
胡小明, 陈海婵. 可证明安全的SM2盲适配器签名方案[J]. 网络与信息安全学报, 2024, 10(02): 59-68. DOI: 10.11959/j.issn.2096-109x.2024024.
Format: HU X M, CHEN H C. Proven secure blind adaptor signature scheme based on the SM2[J]. Chinese Journal of Network and Information Security, 2024, 10(02): 59-68. DOI: 10.11959/j.issn.2096-109x.2024024.
适配器签名是近年来出现的新密码学原语,其基本思想是将签名过程与秘密值的揭示联系起来,通过将预签名适配为正式签名,使最终的签名结果和常规签名一致。预签名与正式签名可提取出一个秘密值,因此具有原子性,在区块链中拥有良好的应用前景。但是适配器签名不具有匿名性,容易暴露交易参与者身份,在电子支付等隐私需求高的应用场景具有一定的局限性。为了解决这一问题,提出了新的盲适配器签名,系统模型和安全模型,在新系统模型的基础上提出了基于SM2签名算法的盲适配器签名方案,并基于SM2签名方案的不可伪造性和困难关系证明了该方案的安全性满足新提出的安全模型要求,即满足盲性、预签名可适配性、不可伪造性和证据可提取性。性能分析表明,在计算开销上,SM2盲适配器签名方案的总时间仅比SM2适配器签名方案增加了5.91 ms,与现有同类方案相比,该方案盲性更强且具有自主可控性,对于隐私要求高且需要采用国产密码算法的关键应用场景具有良好的应用价值。
Adaptor signature (AS) is a novel cryptographic primitive that has gained prominence in recent years for its ability to link the signature process with the revelation of a secret value. The process involves adapting a pre-signature to a formal signature
ensuring that the final signature result aligns with conventional signatures. Both the pre-signature and the formal signature are capable of extracting a secret value
which endows AS with atomicity and suggests its promising application within blockchain technologies. However
the lack of anonymity in AS can lead to the exposure of transaction participants' identities
which may limit its application in scenarios demanding high privacy standards
such as electronic payments. To address this issue
a new blind adaptor signature system model and security model were proposed. Subsequently
a blind adaptor signature scheme was developed based on the SM2 signature algorithm
leveraging the new system model. The security of this new scheme
which was founded on the unforgeability and the hardness of the SM2 signature scheme
was demonstrated to meet the requirements of the newly proposed security model. Specifically
the scheme was proven to satisfy properties such as blindness
pre-signature adaptability
unforgeability
and witness extractability. Performance analysis indicates that the computational overhead of the SM2 blind adaptor signature scheme is minimal
with the total operation time of the signature process only increasing by a negligible 5.91ms compared to the SM2 adaptor signature scheme. Moreover
when compared to existing similar schemes
the SM2 blind adaptor signature scheme offers enhanced blindness and autonomy
making it particularly valuable for key application scenarios that necessitate high privacy requirements and the utilization of domestic cryptographic algorithms.
DESHPANDE A , HERLIHY M . Privacy-preserving cross-chain atomic swaps [M ] // Financial Cryptography and Data Security . Cham : Springer International Publishing , 2020 : 540 - 549 .
GUGGER J . Bitcoin-Monero cross-chain atomic swap [J ] . IACR Cryptology ePrint Archive , 2020 : 1026 .
AUMAYR L , ERSOY O , ERWIG A , et al . Generalized channels from limited blockchain scripts and adaptor signatures [M ] . Cham : Springer International Publishing , 2021 : 635 - 664 .
MALAVOLTA G , MORENO-SANCHEZ P , SCHNEIDEWIND C , et al . Anonymous multi-hop locks for blockchain scalability and interoperability [C ] // Proceedings 2019 Network and Distributed System Security Symposium . Reston, VA : Internet Society , 2019 : 1 - 15 .
SCHNORR C P . Efficient signature generation by smart cards [J ] . Journal of Cryptology , 1991 , 4 ( 3 ): 161 - 174 .
KERRY C F , GALLAGHR P D . Digital signature standard [S ] . 2013 .
ERWIG A , FAUST S , HOSTÁKOVÁ K , et al . Two-party adaptor signatures from identification schemes [C ] //GARAY JA. IACR International Conference on Public-Key Cryptography . Cham : Springer , 2021 : 451 - 480 .
彭聪 , 罗敏 , 何德彪 , 等 . 基于SM2数字签名算法的适配器签名方案 [J ] . 计算机研究与发展 , 2021 , 58 ( 10 ): 2278 - 2286 .
PENG C , LUO M , HE D B , et al . Adaptor signature scheme based on the SM2 digital signature algorithm [J ] . Journal of Computer Research and Development , 2021 , 58 ( 10 ): 2278 - 2286 .
王子瑞 , 张驰 , 魏凌波 . 基于双线性配对的适配器签名方案 [J ] . 密码学报 , 2022 , 9 ( 4 ): 686 - 697 .
WANG Z R , ZHANG C , WEI L B . Adaptor signatures from bilinear pairings [J ] . Journal of Cryptologic Research , 2022 , 9 ( 4 ): 686 - 697 .
张艳硕 , 刘宁 , 袁煜淇 , 等 . 基于ISRSAC数字签名算法的适配器签名方案 [J ] . 通信学报 , 2023 , 44 ( 3 ): 178 - 185 .
ZHANG Y S , LIU N , YUAN Y Q , et al . Adaptor signature scheme based on ISRSAC digital signature algorithm [J ] . Journal on Communications , 2023 , 44 ( 3 ): 178 - 185 .
ERWIG A , RIAHI S . Deterministic wallets for adaptor signatures [C ] // European Symposium on Research in Computer Security . Cham : Springer , 2022 : 487 - 506 .
涂彬彬 , 陈宇 . 支持批量证明的SM2适配器签名及其分布式扩展 [J ] . 软件学报 , 2024 , 35 ( 5 ): 2566 - 2582 .
TU B B , CHEN Y . SM2-based adaptor signature with batch proofs and it's distributed extension [J ] . Journal of Software , 2024 , 35 ( 5 ): 2566 - 2582 .
CHAUM D . Blind signatures for untraceable payments [C ] //CHAUM D, RIVEST RL, SHERMAN AT. Advances in Cryptology . Boston, MA : Springer , 1983 : 199 - 203 .
RÜCKERT M . Lattice-based blind signatures [C ] // International Conference on the Theory and Application of Cryptology and Information Security . Berlin, Heidelberg : Springer , 2010 : 413 - 430 .
常亮 , 韩同壮 , 马仲博 . 一种基于ECC的同态加密盲签名方法 [J ] . 通信技术 , 2020 , 53 ( 8 ): 1983 - 1987 .
CHANG L , HAN T Z , MA Z B . A blind signature method of based on ECC homomorphic encryption [J ] . Communications Technology , 2020 , 53 ( 8 ): 1983 - 1987 .
何德彪 , 张语荻 , 张方国 , 等 . 一种轻量级SM 2 盲签名生成方法及系统 : CN110213048A [P ] . 2019-09-06 .
HE D B , ZHANG Y D , ZHANG F G , et al . A lightweight SM 2 blind signature generation method and system [P ] . 2019-09-06 .
唐卫中 , 张大伟 , 佟晖 . 基于SM2的无证书盲签名方案 [J ] . 计算机应用研究 , 2022 , 39 ( 2 ): 552 - 556 .
TANG W Z , ZHANG D W , TONG H . Certificateless blind signature scheme based on SM2 [J ] . Application Research of Computers , 2022 , 39 ( 2 ): 552 - 556 .
吕尧 , 侯金鹏 , 聂冲 , 等 . 基于SM9算法的部分盲签名方案 [J ] . 网络与信息安全学报 , 2021 , 7 ( 4 ): 147 - 153 .
LYU Y , HOU J P , NIE C , et al . Partial blind signature scheme based on SM9 algorithm [J ] . Chinese Journal of Network and Information Security , 2021 , 7 ( 4 ): 147 - 153 .
LI C , JIANG B , GUO Y , et al . Efficient group blind signature for medical data anonymous authentication in blockchain-enabled IoMT [J ] . Computers , Materials & Continua, 2023 , 76 ( 1 ).
白雪 , 秦宝东 , 郭瑞 , 等 . 基于SM2的两方协作盲签名协议 [J ] . 网络与信息安全学报 , 2022 , 8 ( 6 ): 39 - 51 .
BAI X , QIN B D , GUO R , et al . Two-party cooperative blind signature based on SM2 [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 6 ): 39 - 51 .
SHENTU Q C , YU J P . A blind-mixing scheme for Bitcoin based on an elliptic curve cryptography blind digital signature algorithm [J ] . Computer Science , 2015 : 1510 .
YI X , LAM K Y . A new blind ECDSA scheme for Bitcoin transaction anonymity [C ] // Proceedings of the Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security . New York : ACM , 2019 : 613 - 620 .
DESHPANDE A , HERLIHY M . Privacy-preserving cross-chain atomic swaps [C ] // International Conference on Financial Cryptography and Data Security . Cham : Springer , 2020 : 540 - 549 .
QIN X R , PAN S M , MIRZAEI A , et al . BlindHub: Bitcoin-compatible privacy-preserving payment channel hubs supporting variable amounts [C ] // Proceedings of the 2023 IEEE Symposium on Security and Privacy (SP) . Piscataway : IEEE Press , 2023 : 2462 - 2480 .
国家密码管理局 . SM2椭圆曲线公钥密码算法 [S ] . 2010 .
OSCCA . Elliptic curve public key cryptography algorithm [S ] . 2010 .
0
浏览量
56
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621