一种针对El-Gamal数字签名生成的安全外包计算方案

doi:10.3969/j.issn.1671-1122.2019.03.010

信息网络安全 ›› 2019, Vol. 19 ›› Issue (3): 81-86.doi: 10.3969/j.issn.1671-1122.2019.03.010

一种针对El-Gamal数字签名生成的安全外包计算方案

赵谱¹, 崔巍², 郝蓉¹(), 于佳^1,³

1.青岛大学计算机科学技术学院,山东青岛 266071
2.科学技术部信息中心,北京100862
3.中国科学院信息工程研究所信息安全国家重点实验室,北京 100093

收稿日期:2018-07-10 出版日期:2019-03-19 发布日期:2020-05-11
作者简介:
作者简介：赵谱（1995—）,男,河南,硕士研究生,主要研究方向为云计算安全;崔巍(1982—),男,山东,高级工程师,博士,主要研究方向为网络安全、数字签名、云计算安全;郝蓉（1976—）,女,山东,高级实验师,硕士,主要研究方向为信息安全;于佳（1976—）,男,山东,教授,博士,主要研究方向为密码学、云计算安全、大数据安全、网络安全。
基金资助:
国家自然科学基金[61572267,61272425];“十三五”国家密码发展基金[MMJJ20170118];中国科学院信息工程研究所信息安全国家重点实验室开放课题[2016-MS-23,2017-MS-21]

A Secure Outsourcing Computation Scheme for El-Gamal Signature Generation

Pu ZHAO¹, Wei CUI², Rong HAO¹(), Jia YU^1,³

1. College of Computer Science and Technology, Qingdao University, Qingdao Shandong 266071, China
2. Information Center of the Ministry of Science and Technology, Beijing 100862, China
3. State Key Laboratory of Information Security,Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China

Received:2018-07-10 Online:2019-03-19 Published:2020-05-11

摘要/Abstract

摘要：

云计算作为一种新型计算模式,满足了人们将计算能力作为一种资源的需求。云服务器可以为资源受限的用户提供计算能力、存储空间等多方面的支持。完全可信的云服务器在实际应用中非常少见,不受信任的云服务器可能会窃取用户隐私。文章提出一种针对El-Gamal数字签名生成的安全外包计算方案,在云服务器的协助下,资源受限的签名者可以高效生成El-Gamal签名,且保护签名者的隐私不被泄露。该方案还包含验证机制,使签名者可以验证云服务器返回结果的正确性。理论分析证明,该方案可以在保护签名者隐私的前提下帮助签名者提高签名生成效率。

关键词: 安全外包计算, El-Gamal数字签名, 云计算安全

Abstract:

As a new computing mode, cloud computing has realized people’s requirement of computing power as a resource. Cloud servers can provide resource-constrained clients with much support, including computing power and storage space. But fully trusted servers are rare in practice. Untrusted servers may steal the privacy of the clients. This paper presents a secure outsourcing scheme for El-Gamal signature generation, which makes resource-constrained signers could efficiently generate El-Gamal signature with the help of cloud servers. Meanwhile, our scheme also provides privacy protection of signers. Our scheme also includes verification mechanism, which allows signer to check the correctness of result returned by the cloud server. The security analysis proves that our proposed scheme can help signers to improve signature generation efficiency under the premise of protecting signers’ privacy.

Key words: secure outsourcing computation, El-Gamal signature, cloud computing security

中图分类号:

TP309

赵谱, 崔巍, 郝蓉, 于佳. 一种针对El-Gamal数字签名生成的安全外包计算方案[J]. 信息网络安全, 2019, 19(3): 81-86.

Pu ZHAO, Wei CUI, Rong HAO, Jia YU. A Secure Outsourcing Computation Scheme for El-Gamal Signature Generation[J]. Netinfo Security, 2019, 19(3): 81-86.

图/表 3

图1

表1

表 2

参考文献 22

[1]	DIFFIE W, HELLMAN M E.New Directions in Cryptography[J]. IEEE Transactions on Information Theory, 1976, 22(6): 644-654.
[2]	RIVEST R L, SHAMIR A, ADLEMAN L.A Method for Obtaining Digital Signatures and Public-key Cryptosystems[J]. Communications of the ACM, 1978, 26(2): 96-99.
[3]	EL GAMAL T.A Public Key Cryptosystem and a Signature Scheme Based on Discrete Logarithms[J]. IEEE Transactions on Information Theory, 1985, 31(4): 469-472.
[4]	REN K, WANG C, WANG Q.Security Challenges for the Public Cloud[J]. IEEE Internet Computing, 2012, 16(1): 69-73.
[5]	WANG C, CAO N, REN K, et al.Enabling Secure and Efficient Ranked Keyword Search over Outsourced Cloud Data[J]. IEEE Transactions on Parallel & Distributed Systems, 2012, 23(8): 1467-1479.
[6]	HOHENBERGER S,LYSYANSKAYA A. How to Securely Outsource Cryptographic Computations[EB/OL]. .
[7]	CHEN X, LI J, MA J, et al. New Algorithms for Secure Outsourcing of Modular Exponentiations[EB/OL]. , 2018-7-1.
[8]	YE J, XU Z, DING Y.Secure Outsourcing of Modular Exponentiations in Cloud and Cluster Computing[J]. Cluster Computing, 2016, 19(2): 811-820.
[9]	DING Y, XU Z, YE J, et al. Secure Outsourcing of Modular Exponentiations under Single Untrusted Programme Model[EB/OL].
[10]	SU Q, YU J, TIAN C, et al. How to Securely Outsource the Inversion Modulo a Large Composite Number[EB/OL].
[11]	ZHOU K,REN J.Secure Outsourcing of Scalar Multiplication on Elliptic Curves[EB/OL]. .
[12]	LEI X, LIAO X, HUANG T, et al.Achieving Security, Robust Cheating Resistance, and High-efficiency for Outsourcing Large Matrix Multiplication Computation to a Malicious Cloud[J]. Information Sciences, 2014, 280: 205-217.
[13]	HU Xing, PEI Dingyi, TANG Chunming, et al.Verifiable and Secure Outsourcing of Matrix Calculation and its Application[J]. Scientia Sinica(Informationis), 2013, 43(7): 842-852.
	胡杏,裴定一,唐春明,等.可验证安全外包矩阵计算及其应用[J].中国科学:信息科学, 2013,43(7):842-852.
[14]	ZHANG Y, BLANTON M. Efficient Secure and Verifiable Outsourcing of Matrix Multiplications[EB/OL]., 2018-7-1.
[15]	WU Duoduo, LAI Qiqi, YANG Bo.Efficient, Verifiable and Secure Outsourcing of Matrix Multiplication[J]. Journal of Cryptologic Research, 2017, 4(4): 322-332.
	武朵朵,来齐齐,杨波.矩阵乘积的高效可验证安全外包计算[J].密码学报,2017,4(4):322-332.
[16]	LEI X, LIAO X, HUANG T, et al.Outsourcing Large Matrix Inversion Computation to a Public Cloud[J]. IEEE Transactions on Cloud Computing, 2013, 1(1): 78-87.
[17]	REN X, HUANG H.Secure and Efficient Protocol for Outsourcing Large Matrix Determinant Computation to Semi-honest Cloud[J]. Computer Engineering & Applications, 2014, 50(10): 82-86.
	任晓霞,黄宏宇.安全高效的大矩阵行列式计算云外包协议[J].计算机工程与应用,2014,50(10):82-86.
[18]	FU S, YU Y,XU M. Practical Privacy-preserving Outsourcing of Large-scale Matrix Determinant Computation in the Cloud[EB/OL]..
[19]	WU Hongfeng, REN Huanshu.An Outsourcing Computing Based on Large Matrix QR Decomposition in Cloud Environment[J]. Netinfo Security, 2018, 18(3): 86-90.
	吴宏锋,任桓枢.云环境下基于大规模矩阵QR分解的外包计算[J].信息网络安全,2018,18(3):86-90.
[20]	WANG C, REN K, WANG J, et al.Harnessing the Cloud for Securely Outsourcing Large-Scale Systems of Linear Equations[J]. IEEE Transactions on Parallel & Distributed Systems, 2013, 24(6):1172-1181.
[21]	CHEN X, HUANG X, LI J, et al.New Algorithms for Secure Outsourcing of Large-Scale Systems of Linear Equations[J]. IEEE Transactions on Information Forensics & Security, 2014, 10(1):69-78.
[22]	DENG Fuhu, LI Zhenyu, ZENG Liyao, et al.A Cloud Decryption System Based on El-Gamal Security Outsourcing Decryption[J]. Netinfo Security, 2017, 17(12): 73-79.
	邓伏虎,李震宇,曾莉尧,等.一种支持El-Gamal安全外包解密的云密码系统[J].信息网络安全,2017,17(12):73-79.

阶段	签名者		云服务器
盲化阶段	通过盲化操作将签名生成转化为四个模指数运算和一个模逆运算	随机顺序发送四个模指数计算请求以及一个模逆计算请求云服务器返回其计算结果若验证失败,签名者指控服务器存在恶意欺骗行为
计算阶段	将计算请求发送给云服务器		云服务器依照签名者的计算请求进行相应计算,并将计算结果返回给签名者
验证阶段	接收到云服务器的响应之后验证返回结果的正确性
求解阶段	若验证成功,签名者依据服务器返回结果恢复出签名

操作	签名者本地生成签名	签名者外包生成签名
模乘运算	1.5log₂k+2≈3000	10+1.5log₂c₁+1.5log₂c₂+1.5log₂r≈200
模加运算	1	3
扩展欧几里得算法	1	0

一种针对El-Gamal数字签名生成的安全外包计算方案

A Secure Outsourcing Computation Scheme for El-Gamal Signature Generation

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 3

参考文献 22

相关文章 6

编辑推荐

Metrics

本文评价

[1]	张振峰, 张志文, 王睿超. 网络安全等级保护2.0云计算安全合规能力模型[J]. 信息网络安全, 2019, 19(11): 1-7.
[2]	吕从东, 韩臻. 基于IP模型的云计算安全模型[J]. 信息网络安全, 2018, 18(11): 27-32.
[3]	张如辉, 郭春梅, 毕学尧. 美国政府云计算安全策略分析与思考[J]. 信息网络安全, 2015, 15(9): 257-261.
[4]	陶政,胡俊,吴欢,杨静. 云租户虚拟机主动可信验证机制的研究与应用[J]. 信息网络安全, 2015, 15(11): 21-26.
[5]	许友松;郑丽娜. 云计算安全体系技术框架与等保规范要求[J]. , 2013, 13(Z): 0-0.
[6]	段翼真;王晓程;刘忠. 云计算安全:概念、现状与关键技术[J]. , 2012, 12(8): 0-0.