Abstract: Extraction signatures allow the signature holder to remove sensitive data blocks from the signed data without interacting with the original signer, and to compute a public and verifiable signature for the sanitized data. Most existing extraction signature schemes are built on traditional numbertheoretic hard assumptions. However, Given the potential threat posed by quantum computers, constructing extraction signature schemes that are resistant to quantum computing attacks. Therefore, this paper proposes an identitybased extraction signature scheme on ideal lattices based on the RingSIS (ring short integer solution) problem, proving its unforgeability and privacy under adaptive chosen identity and message attacks. Both theoretical and efficiency analyses show that compared to similar schemes, the proposed scheme in this paper simultaneously possesses multiple functionalities such as identity authentication, privacy, and quantum resistance, with shorter public key sizes, enhanced security, and reduced algorithmic time consumption.

Key words:  , idea lattices, RingSIS, privacy preserving, identitybased cryptography, content extraction signature

摘要： 可截取签名允许签名人根据需要，在不与原始签名人交互的情况下删除已签名中的敏感数据块，并为截取后的数据计算一个公开并且可验证的签名.目前大多数可截取签名方案都是基于传统数论的困难假设构造的，鉴于量子计算机可能构成的威胁，构造能够抵抗量子计算攻击的可截取签名方案尤为重要.因此基于格的RingSIS(ring short integer solution)问题，提出一种理想格上基于身份的可截取签名方案，证明了该方案在选择身份和消息攻击下存在不可伪造性和隐私性.理论分析和效率分析表明，相较于同类方案，该方案在功能性上同时具备身份认证、隐私性和抗量子攻击等多种功能，用户公钥尺寸更短、安全性更高、算法耗时更低.

关键词: 理想格, RingSIS, 隐私保护, 基于身份的密码体制, 可截取签名