可证安全的高效可托管公钥加密方案.pdf

ৰ35Żৰ7ƛỞǍƚĉVol.35No.7
2014À7ƄJournalonCommunicationsJuly2014
doi:10.3969/j.issn.1000-436x.2014.07.004

dz᪅ƽ͔Ոʌάdz¼੥͘⍩¤Ǻ5˄

ǎɻ˵1ɎäO1ŅȮ2˚ŻŢ1
(1.ǩ*Tᇇ̓ƚǍʻ࢕ƚ^1࣏ƚ┦˳ǩ*3100122.Z#Ở̓ƚᩥਜ਼ƶ࢕ƚ^1࣏ிZ#200240)

ʼᡅdz¼੥͘⍩¤Ǻ5˄1͘⍩ȭàz2ᢧǺࢅ⍩Ʒdz̓̓λɅ͘⍩Ȗ܄᪂9PKI͘⍩᪅RՈϔ
º໐┑ĺ͘͢⍩᪅R੥ˊՈᯣሻ4ȐrȭzϬ›঳ǡ᪸ƷK࿁λɃ¤◄ࢅ⍩ƌʔाⒸλḿϬ›Ոࢅ⍩੥ֲ
ˊᯣĩ4ȴϦ2,Ոdz¼੥͘⍩¤Ǻ5˄͢ৰ25˄«Dz¤ƅɴƌȐି5˄ż&ʌάՈ4ƷK«
ৰ1dz᪅ƽ͔ՈǸି5˄͢ƽ͔ɳȖzʃβՈǐඃɳDiffie-Hellmanȳ᪂4
ਜ਼ͩ¤Ǻ5˄dz¼੥͘⍩¤Ǻdz᪅ƽ͔ۅ⏲᪑Ǻ͟
Aতේǻ1000-436X(2014)07-0033-05ۅିǻTP309Dzʃ᪊
Ě

Provablysecureandefficientescrowable
publickeyencryptionschemes

LIUWen-hao1,WANGSheng-bao1,CAOZhen-fu2,HANLi-dong1
(1.SchoolofInformationScienceandEngineering,HangzhouNormalUniversity,Hangzhou310012,China;
2.DepartmentofComputerScienceandEngineering,ShanghaiJiaotongUniversity,Shanghai200240,China)

Abstract:Inanescrowablepublickeyencryption(E-PKE)scheme,therearetwokeysassociatedwithonepublickey.It
canreducethetotalnumberofcertificatesinthepublickeyinfrastructure(PKI)toalargeextent,thusdegradethecom-
plexityofcertificatemanagement.Moreover,anE-PKEschemecanalsoreducethekeystorageforendusers.Twosuch
schemeswereproposed,withthesecondonebeingthemostefficientoneamongallexistingE-PKEschemes.Itisalso
thefirstprovablysecureE-PKEscheme,whosesecurityisbasedonthestandardbilinearDiffie-Hellman(BDH)assump-
tion.
Keywords:cryptographicalgorithm;encryptionscheme;escrowablepublickeyencryption;provablesecurity

ȏ(EA,escrowagency)4͢ƵȭzϔƋੂȑƉ¥
1šᣄ
Ƿ͛5ZՈ]dzęᰚɳՈֲՈף໐ᣄϦzƍᱷ
ƚńตචǍʻƽ͔ՈňϬᱎǡᱎnjᡅ˖ੂȑࢅ⍩à᪩Ǯ࿁&ੂȑ¦¤ǰɅŷ¼੥ۅ͘⍩Ǻ
Ǜ4¦ØₑᢊƷ࿁̻Ȑr&Ϭ›ȴƇljǺɳʐûȏ]࿁̻ቻǣϬ›Ո(ੂȑ)ࢅ⍩4¤ÑƟūϬ
ęᰚϔƋੂȑƉ¥[1]4Ϣ໐-Ϭ̳PP͘Čඣ͘⍩¤Ǻ5˄(ŷΞRSA)rϵzᢧǺࢅ⍩^
⍩/ࢅ⍩̯ඈǡȐrȴƇẝ2࢑Ɖ¥ՈɆͩƌńੂȑࢅ⍩ּȐϬ›Ո̳Pࢅ⍩«Ȫᝯ¼੥ɥ«P
4ׂڟₑ⒲L4Ŋ̴&r⓶ǶϵzϬ›ࢅ⍩Ո͍໐Ụ
-᪂9(PKI,publickeyinfrastruc܄tȭ̴QǺՈ]dzᢧǺz້ϦzͩǗ֕੥Ո◄ɴᜐ͘⍩Ȗ
[Pჰ₋Ϭ8ǐ᪅Rµś9[2ׂڟᡅnjnjᡅ˖Ϭ›ȺᢧǺࢅ⍩¼੥4dzǍçՈ¼੥ture)&r᫇ʐẝ

Κःaƛ2014-06-02ǚúaƛ2014-06-25
˳ׅνྲྀ˳ׅႮϢ࢕ƚȖₕᰈ­-ֲLZ12F02005Ȗₕ-ֲęǪႮϢ࢕ƚȖₕᰈ­-ֲ61103209,61170227
ตච^džäƫęǪₑͥǒɀǘŌ΢Ȗₕᰈ­-ֲSKLNST-2009-1-13Ɖ࢕ƚȖₕᰈ­-ֲY201222977
FoundationItems:TheNationalNaturalScienceFoundationofChina(61103209,61170227);TheNaturalScienceFoundationof
Zhe