TACHYON: Fast Signatures from Compact Knapsack
TACHYON: Fast Signatures from Compact Knapsack
复制标题
DOI：
10.1145/3243734.3243819
复制
发表时间：
2018-10
期刊：
影响因子：
--
通讯作者：
R. Behnia;Muslum Ozgur Ozmen;A. Yavuz;Mike Rosulek
中科院分区：
文献类型：
--
作者：
R. Behnia;Muslum Ozgur Ozmen;A. Yavuz;Mike Rosulek
我们介绍了一个简单的，但有效的数字签名方案，提供后量子安全的承诺。我们的计划，命名为TACHYON，是基于一种新的方法，用于扩展一次性的基于散列的签名（多项式有界）多次签名，使用广义紧背包函数的加法同态性质。我们的设计允许TACHYON~实现几个关键特性。首先，它的签名和验证算法是目前同类产品中速度最快的，具有更高的安全性。这使得TACHYON~能够在其对等方中实现最低的端到端延迟，同时也使其适用于资源有限的签名者。其次，它的私钥可以小到κ位，其中κ是所需的安全级别。第三，与大多数基于格的对应物不同，TACHYON~在签名过程中不需要任何高斯采样，因此不会受到针对此过程的侧信道攻击。我们还探讨了TACHYON的各种速度和存储权衡，这要归功于其高度可调的参数。其中一些权衡可以加速TACHYON签名以换取更大的密钥，从而允许TACHYON~进一步改善其端到端延迟。
We introduce a simple, yet efficient digital signature scheme which offers post-quantum security promise. Our scheme, named TACHYON, is based on a novel approach for extending one-time hash-based signatures to (polynomially bounded) many-time signatures, using the additively homomorphic properties of generalized compact knapsack functions. Our design permits TACHYON~to achieve several key properties. First, its signing and verification algorithms are the fastest among its current counterparts with a higher level of security. This allows TACHYON~to achieve the lowest end-to-end delay among its counterparts, while also making it suitable for resource-limited signers. Second, its private keys can be as small as κ bits, where κ is the desired security level. Third, unlike most of its lattice-based counterparts, TACHYON~does not require any Gaussian sampling during signing, and therefore, is free from side-channel attacks targeting this process. We also explore various speed and storage trade-offs for TACHYON, thanks to its highly tunable parameters. Some of these trade-offs can speed up TACHYON signing in exchange for larger keys, thereby permitting TACHYON~to further improve its end-to-end delay.