Twin-Schnorr: a security upgrade for the Schnorr identity-based identification scheme.
Twin-Schnorr: a security upgrade for the Schnorr identity-based identification scheme.
复制标题
DOI：
10.1155/2015/237514
复制
发表时间：
2015
影响因子：
--
通讯作者：
Phan RC
中科院分区：
文献类型：
--
作者：
Chin JJ;Tan SY;Heng SH;Phan RC
大多数基于身份的身份识别（IBI）计划在最近的文献中提出的是使用配对操作。由于配对的高操作成本，这降低了效率。此外，大多数这些IBI计划被证明是安全的，对假冒下使用交互式假设，如多一个RSA反演假设或多一个离散对数假设，翻译为较弱的安全保证，由于这些假设的交互性质的主动和并发攻击。Schnorr-IBI方案首先通过Schnorr签名的Kurosawa-Heng变换提出。它仍然是一个最快的，但最安全的IBI计划下模仿被动攻击，由于其配对的自由设计。然而，当需要在主动和并发攻击下对冒充者进行安全保护时，由于协议必须重复多次，因此在效率方面大大恶化。在本文中，我们升级Schnorr-IBI方案是安全的，仅使用经典的离散对数假设下的主动和并发攻击下的假冒。这意味着在业务费用仅略有增加的情况下，安全保障程度更高。此外，由于该计划的运作没有配对，它仍然保持其效率和优越性相比，其他配对为基础的IBI计划。
Most identity-based identification (IBI) schemes proposed in recent literature are built using pairing operations. This decreases efficiency due to the high operation costs of pairings. Furthermore, most of these IBI schemes are proven to be secure against impersonation under active and concurrent attacks using interactive assumptions such as the one-more RSA inversion assumption or the one-more discrete logarithm assumption, translating to weaker security guarantees due to the interactive nature of these assumptions. The Schnorr-IBI scheme was first proposed through the Kurosawa-Heng transformation from the Schnorr signature. It remains one of the fastest yet most secure IBI schemes under impersonation against passive attacks due to its pairing-free design. However, when required to be secure against impersonators under active and concurrent attacks, it deteriorates greatly in terms of efficiency due to the protocol having to be repeated multiple times. In this paper, we upgrade the Schnorr-IBI scheme to be secure against impersonation under active and concurrent attacks using only the classical discrete logarithm assumption. This translates to a higher degree of security guarantee with only some minor increments in operational costs. Furthermore, because the scheme operates without pairings, it still retains its efficiency and superiority when compared to other pairing-based IBI schemes.