Towards Practical Post-quantum Signatures for Resource-Limited Internet of Things
Towards Practical Post-quantum Signatures for Resource-Limited Internet of Things
复制标题
DOI：
10.1145/3485832.3488023
复制
发表时间：
2021-12
期刊：
影响因子：
--
通讯作者：
R. Behnia;A. Yavuz
中科院分区：
文献类型：
--
作者：
R. Behnia;A. Yavuz
数字签名是提供具有公开可验证性、不可否认性和可伸缩性的身份验证的基本加密工具。然而，数字签名通常依赖于昂贵的操作，对于通常见于物联网和系统(IoT)的低端设备来说，这些操作可能成本很高。当考虑到后量子安全数字签名时，这些效率问题尤其严重。因此，设计考虑到这种约束物联网系统需求的后量子安全数字签名是至关重要的。在这项工作中，我们提出了一种新的轻量级后量子数字签名，它考虑了资源受限的物联网的处理、存储和带宽限制。我们的新方案，称为，通过分布式公钥计算方法将一次性签名有效地转换为(多项式有界的)多次签名。这种新的方法使资源受限的签名者能够计算签名，而不需要任何昂贵的格子运算(例如拒绝采样、矩阵乘法等)，并且只需要很低的存储空间和紧凑的签名大小。我们还开发了具有前向安全性的变体，这是通过最先进的后量子签名实现的一种极其昂贵的特性。
A digital signature is an essential cryptographic tool to offer authentication with public verifiability, non-repudiation, and scalability. However, digital signatures often rely on expensive operations that can be highly costly for low-end devices, typically seen in the Internet of Things and Systems (IoTs). These efficiency concerns especially deepen when post-quantum secure digital signatures are considered. Hence, it is of vital importance to devise post-quantum secure digital signatures that are designed with the needs of such constraint IoT systems in mind. In this work, we propose a novel lightweight post-quantum digital signature that respects the processing, memory, and bandwidth limitations of resource-limited IoTs. Our new scheme, called , efficiently transforms a one-time signature to a (polynomially-bounded) many-time signature via a distributed public key computation method. This new approach enables a resource-limited signer to compute signatures without any costly lattice operations (e.g., rejection samplings, matrix multiplications, etc.), and only with a low-memory footprint and compact signature sizes. We also developed a variant for with forward-security, which is an extremely costly property to attain via the state-of-the-art post-quantum signatures.