抗选择性公开攻击的身份型广播加密方案.pdfVIP

第33 卷第12 期 电 子 与 信 息 学 报 Vol.33No.12 2011 年12 月 Journal of Electronics Information Technology Dec. 2011 抗选择性公开攻击的身份型广播加密方案 孙 瑾*①② 胡予濮① ①(西安电子科技大学计算机网络与信息安全教育部重点实验室 西安 710071) ②(西安理工大学理学院数学系 西安 710054) 摘 要：考虑到热点议题“抗选择性公开安全性”近年来一直局限在公钥加密方案(PKE)中很难应用于身份型加密 方案的事实，该文结合广播加密模型，采用Waters 等人新提出的“线性又随机”的技巧提出一个抗选择性公开攻 击的身份型广播加密方案。该方案建立在标准模型下，具有尺寸固定的密文与密钥，同时无需使用随机标签，具有 较高的计算效率与存储效率。该方案的安全性依赖于判定性线性假设，证明结果显示此方案达到了抗选择性公开安 全性的高安全要求。 关键词：广播加密；基于身份的密码；选择公开攻击；标准模型 中图分类号：TN918.1 文献标识码： A 文章编号：1009-5896(2011)12-2929-06 DOI: 10.3724/SP.J.1146.2011.00372 Identity-based Broadcast Encryption Scheme Against Selective Opening Attack ①② ① Sun Jin Hu Yu-pu ① (Key Lab of Computer Network and Information Security, Xidian University, Xi’an 710071, China) ② (Department of Application Mathematics, Xi’an University of Technology, Xi’an 710054, China) Abstract: According to the fact that security against Selective-Opening Attack (SOA) is confined to the case of Public-Key Encryption (PKE) but is difficult to yield solutions in Identity Based Encryption (IBE) in resent years, a novel identity-based broadcast encryption scheme against selective opening attack is proposed by combining with Waters et al.“linear or random” techniques and the broadcast encryption model. Based on the standard model without tags, the scheme can achieve constant-size keys and ciphertexts. Furthermore, the scheme’s security is reduced to the decisional linear assumption. The analysis results indicate that the scheme of this paper is selective