基于国密SM9的匿名标识广播加密方案

摘要/Abstract

摘要： 标识广播加密将广播加密与标识加密相结合，在具备广播加密特点的同时，避免了耗费大量资源的证书管理工作.为满足我国密码技术自主可控的战略需求，赖建昌等人首次设计了基于我国SM9标识加密算法的高效标识广播加密方案，并给出INDsIDCPA安全性分析.但目前为止，仍缺失基于SM9的匿名标识广播加密方案的研究，匿名标识广播加密能够有效避免数据接收者具备判断其他接收者是否合法的能力.因此，借鉴He等人的通用匿名标识广播加密方案的构造思想，利用双线性对技术，设计了第1个基于国密SM9的随机谕言模型下INDnIDCCA2安全和ANOIDCCA2安全的匿名标识广播加密方案.该方案更易与当前基于国密SM9标识加密算法的系统相融合.对于所设计方案的安全性给出分析过程.性能分析表明方案安全性较好且具备一定的理想特性，即方案主公钥、主私钥、接收者私钥的长度与计算成本恒定，解密计算成本恒定.

关键词: 标识广播加密, 匿名, SM9, IND nID CCA2安全, ANO ID CCA2安全

Abstract: Identitybased broadcast encryption combines broadcast encryption with identitybased encryption, which has the characteristics of broadcast encryption and avoids the certificate management work that consumes a lot of resources. In order to meet the strategic needs of autonomous and controllable cryptography technology in China, Lai Jianchang et al. designed an efficient identity broadcast encryption scheme based on China’s SM9 identitybased encryption algorithm for the first time, and gave INDsIDCPA security analysis. However, so far, there is still a lack of research on the anonymous identitybased broadcast encryption scheme based on SM9, which can effectively avoid data recipients having the ability to judge whether other recipients are legitimate. Therefore, drawing on the construction idea of generic anonymous identitybased broadcast encryption scheme proposed by He et al. and using the bilinear pair technique, the first anonymous identitybased broadcast encryption scheme with INDnIDCCA2 security and ANOIDCCA2 security under the random oracle model based on SM9 is designed, which is more easily integrated with current systems based on SM9 identity encryption algorithm. For the security of the designed scheme, the analysis process is given. Finally, the performance analysis shows that the scheme has good security and some desirable characteristics, that is, the length and computational cost of the main public key, the main private key and the receiver private key are constant, and the decryption computational cost is constant.

Key words: identity based broadcast encryption, anonymous, SM9, IND nID CCA2 security, ANO ID CCA2 security

中图分类号:

TP309

潘璇, 严芬, . 基于国密SM9的匿名标识广播加密方案[J]. 信息安全研究, 2023, 9(10): 968-.

参考文献

［1］Fiat A, Naor M. Broadcast encryption［C］ Proc of Annual Int Cryptology Conf. Berlin: Springer, 1993: 480491［2］Baek J, SafaviNaini R, Susilo W. Efficient multireceiver identitybased encryption and its application to broadcast encryption［C］ Proc of Int Workshop on Public Key Cryptography. Berlin: Springer, 2005: 380397［3］Shamir A. Identitybased cryptosystems and signature schemes［C］ Proc of Workshop on the Theory and Application of Cryptographic Techniques. Berlin: Springer, 1984: 4753［4］Boneh D, Franklin M. Identitybased encryption from the Weil pairing［C］ Proc of Annual Int Cryptology Conf. Berlin: Springer, 2001: 213229［5］Delerablée C. Identitybased broadcast encryption with constant size ciphertexts and private keys［C］ Proc of Int Conf on the Theory and Application of Cryptology and Information Security. Berlin: Springer, 2007: 200215［6］Sakai R, Furukawa J. Identitybased broadcast encryption［J］. IACR Cryptology ePrint Archive, 2007, 2007: 217［7］Bellare M, Boldyreva A, Desai A, et al. Keyprivacy in publickey encryption［C］ Proc of Int Conf on the Theory and Application of Cryptology and Information Security. Berlin: Springer, 2001: 566582［8］Hur J, Park C, Hwang S O. Privacypreserving identitybased broadcast encryption［J］. Information Fusion, 2012, 13(4): 296303［9］Zhang Leyou, Wu Qing, Mu Y. Anonymous identitybased broadcast encryption with adaptive security［C］ Proc of Int Symp on Cyberspace Safety and Security. Cham, Switzerland: Springer, 2013: 258271［10］Zhang Mingwu, Takagi T. Efficient constructions of anonymous multireceiver encryption protocol and their deployment in group email systems with privacy preservation［J］. IEEE Systems Journal, 2012, 7(3): 410419［11］Ren Yanli, Niu Zhihua, Zhang Xinpeng. Fully anonymous identitybased broadcast encryption without random oracles［J］. International Journal of Network Security, 2014, 16(4): 256264［12］Xie Li, Ren Yanli. Efficient anonymous identitybased broadcast encryption without random oracles［J］. International Journal of Digital Crime and Forensics, 2014, 6(2): 4051［13］Fan ChunI, Tseng YiFan. Anonymous multireceiver identitybased authenticated encryption with CCA security［J］. Symmetry, 2015, 7(4): 18561881［14］Xu Peng, Li Jingnan, Wang Wei, et al. Anonymous identitybased broadcast encryption with constant decryption complexity and strong security［C］ Proc of the 11th ACM on Asia Conf on Computer and Communications Security. New York: ACM, 2016: 223233［15］He Kai, Weng Jian, Liu Jianan, et al. Anonymous identitybased broadcast encryption with chosenciphertext security［C］ Proc of the 11th ACM on Asia Conf on Computer and Communications Security. New York: ACM, 2016: 247255［16］He Kai, Weng Jian, Au Man Ho, et al. Generic anonymous identitybased broadcast encryption with chosenciphertext security［G］ LNCS 9723: Proc of Australasian Conf on Information Security and Privacy. Berlin: Springer, 2016: 207222［17］Ming Yang, Yuan Hongping. Fully secure anonymous identity based broadcast encryption with group of prime order［J］. International Journal of Network Security, 2019, 21(1): 716［18］Tseng YiFan, Fan ChunI. Anonymous multireceiver identitybased encryption against chosenciphertext attacks with tight reduction in the standard model［J］. Security and Communication Networks, 2021, 2021:111［19］袁峰, 程朝辉. SM9标识密码算法综述［J］. 信息安全研究, 2016, 2(11): 10081027［20］赖建昌, 黄欣沂, 何德彪. 一种基于商密SM9的高效标识广播加密方案［J］. 计算机学报, 2021, 44(5): 897907［21］Cheng Zhaohui. Security analysis of SM9 key agreement and encryption［C］ Proc of Int Conf on Information Security and Cryptology. Berlin: Springer, 2018: 325［22］刘潇, 刘魏然, 伍前红, 等. 选择密文安全的基于身份的广播加密方案［J］. 密码学报, 2015, 2(1): 6676

[1]	王涛, 谭虎, 徐亭亭, 辛保江, 刘刚, 周潘, . 基于迭代二分聚类的K-匿名机制[J]. 信息安全研究, 2023, 9(5): 402-.
[2]	邓淏天, 彭洪涛, 祝烈煌, 安鹏, 吴桐, 张川. 工业互联网环境下高效分布式匿名异构跨域认证方案[J]. 信息安全研究, 2022, 8(10): 964-.
[3]	王传合赵利军. 等保2.0下的移动警务数据安全技术应用探究[J]. 信息安全研究, 2021, 7(2): 178-183.
[4]	庄媛媛靳晨何昊青. 多方计算特定应用场景的匿名化认定与建议[J]. 信息安全研究, 2021, 7(10): 896-.
[5]	江汉祥苏玉海. 数字货币洗钱模式及追踪分析[J]. 信息安全研究, 2021, 7(10): 977-.
[6]	邓密文. 融合边信息的双重匿名位置隐私保护方案[J]. 信息安全研究, 2020, 6(5): 421-426.
[7]	陈庄陈亚茹. 一种解决组合公钥密钥碰撞的方案[J]. 信息安全研究, 2018, 4(3): 256-260.
[8]	陈震宇张敏付艳艳张振峰李昊. 一种面向轨迹数据发布场景的用户去匿名化攻击方法[J]. 信息安全研究, 2017, 3(10): 0-0.
[9]	于浩佳陈波刘蓉. 匿名网站信息爬取技术研究[J]. 信息安全研究, 2017, 3(10): 0-0.
[10]	袁峰. SM9标识密码算法综述[J]. 信息安全研究, 2016, 2(11): 1008-1027.