Post-Quantum Lattice-Based Cryptography Implementations: A Survey
Post-Quantum Lattice-Based Cryptography Implementations: A Survey
复制标题
DOI：
10.1145/3292548
复制
发表时间：
2019-02-01
影响因子：
16.6
通讯作者：
Cammarota, Rosario
中科院分区：
文献类型：
--
作者：
Nejatollahi, Hamid;Dutt, Nikil;Cammarota, Rosario
量子计算的出现有可能打破许多经典的加密方案，导致公钥密码学的创新，这些创新专注于后量子密码学原语和抵抗量子计算威胁的协议。基于格的密码学是一个有前途的后量子密码学家族，无论是在基本性质方面，以及在其应用于传统和新兴的安全问题，如加密，数字签名，密钥交换和同态加密。虽然这样的技术提供了保证，但在理论上，它们在当代计算平台上的实现需要仔细的设计选择和权衡，以管理计算平台的多样性（例如，从高性能到资源受限），以及面对新兴和不断变化的标准时的部署灵活性。在这项工作中，我们调查的趋势，基于格的加密方案，一些最近的基本建议，使用格在计算机安全，其在软件和硬件中实现的挑战，以及新兴的需求，为他们的采用。该调查意味着提供有关数学的信息，以使读者能够专注于在现有硬件上映射方案或在专用硬件上合成部分或全部方案最终所需的计算机制。
The advent of quantum computing threatens to break many classical cryptographic schemes, leading to innovations in public key cryptography that focus on post-quantum cryptography primitives and protocols resistant to quantum computing threats. Lattice-based cryptography is a promising post-quantum cryptography family, both in terms of foundational properties as well as in its application to both traditional and emerging security problems such as encryption, digital signature, key exchange, and homomorphic encryption. While such techniques provide guarantees, in theory, their realization on contemporary computing platforms requires careful design choices and tradeoffs to manage both the diversity of computing platforms (e.g., high-performance to resource constrained), as well as the agility for deployment in the face of emerging and changing standards. In this work, we survey trends in lattice-based cryptographic schemes, some recent fundamental proposals for the use of lattices in computer security, challenges for their implementation in software and hardware, and emerging needs for their adoption. The survey means to be informative about the math to allow the reader to focus on the mechanics of the computation ultimately needed for mapping schemes on existing hardware or synthesizing part or all of a scheme on special-purpose hardware.