A New Variant of Unbalanced Oil and Vinegar Using Quotient Ring: QR-UOV
A New Variant of Unbalanced Oil and Vinegar Using Quotient Ring: QR-UOV
复制标题
DOI：
10.1007/978-3-030-92068-5_7
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Hiroki Furue;Yasuhiko Ikematsu;Yutaro Kiyomura;T. Takagi
中科院分区：
文献类型：
--
作者：
Hiroki Furue;Yasuhiko Ikematsu;Yutaro Kiyomura;T. Takagi
不平衡油醋签名方案(UOV)是一种20多年来基本未被破解的多元签名方案。然而，它需要使用大的公钥；因此，已经提出了各种方法来减小其大小。在这篇文章中，我们提出了一种新的UOV变种，其公钥由分块矩阵表示，其分量对应于商环的一个元素。我们讨论了商环是否是一个域对我们提出的方案的安全性有何影响。此外，我们讨论了它们对当前已知的和新可能的攻击的安全性，并为我们的方案提出了参数。我们证明了与其他UOV方案相比，我们提出的方案可以在不显著增加签名长度的情况下获得较小的公钥长度。例如，对于NIST的后量子密码学项目(安全级别3)，我们提出的方案的公钥大小为85.8Kb，而压缩彩虹的公钥大小为252.3 Kb，其中彩虹是UOV的变体，是NIST PQC项目的第三轮决赛选手之一。
The unbalanced oil and vinegar signature scheme (UOV) is a multivariate signature scheme that has essentially not been broken for over 20 years. However, it requires the use of a large public key; thus, various methods have been proposed to reduce its size. In this paper, we propose a new variant of UOV with a public key represented by block matrices whose components correspond to an element of a quotient ring. We discuss how it affects the security of our proposed scheme whether or not the quotient ring is a field. Furthermore, we discuss their security against currently known and newly possible attacks and propose parameters for our scheme. We demonstrate that our proposed scheme can achieve a small public key size without significantly increasing the signature size compared with other UOV variants. For example, the public key size of our proposed scheme is 85.8 KB for NIST’s Post-Quantum Cryptography Project (security level 3), whereas that of compressed Rainbow is 252.3 KB, where Rainbow is a variant of UOV and is one of the third-round finalists of the NIST PQC project.