信息网络安全 ›› 2019, Vol. 19 ›› Issue (10): 10-15.doi: 10.3969/j.issn.1671-1122.2019.10.002

• 技术研究 • 上一篇    下一篇

zk-snark的双线性对的国密化方案

黎琳, 张旭霞()   

  1. 北京交通大学计算机与信息技术学院,北京 100044
  • 收稿日期:2019-06-21 出版日期:2019-10-10 发布日期:2020-05-11
  • 通讯作者: 张旭霞 E-mail:17120488@bjtu.edu.cn
  • 作者简介:

    作者简介:黎琳(1979—),女,山东,副教授,博士,主要研究方向为密码学;张旭霞(1995—),女,山西,硕士研究生,主要研究方向为密码学。

  • 基金资助:
    国家自然科学基金[61572066];信息保障技术重点实验室开放基金[KJ-17-107]

National Secret Substitution of zk-snark Bilinear Pair

Lin LI, Xuxia ZHANG()   

  1. School of Computer and Information Technology, Beijing Jiaotong University, Beijing 100044, China
  • Received:2019-06-21 Online:2019-10-10 Published:2020-05-11
  • Contact: Xuxia ZHANG E-mail:17120488@bjtu.edu.cn

摘要:

近年来,随着人们对隐私保护的重视,零知识证明技术也得到了迅速的发展。zk-snark是一种简洁的非交互式的零知识证明协议,其中的多项式除法算法采用快速傅立叶变换算法实现,这要求其使用的双线性对的椭圆曲线阶减1有足够大的2的高次幂因子。但现行的国密SM9算法采用的双线性对并不满足这一要求,如果直接用现有的双线性对直接进行替代,将使得zk-snark的性能极大降低。文章基于BN曲线构造双线性对的办法,提出了zk-snark的双线性对的国密化方案,在不影响zk-snark性能的前提下,满足了国密的安全性要求。

关键词: 信息安全, 双线性对, BN曲线, zk-snark, 国密SM9

Abstract:

In recent years, with the emphasis on privacy protection, zero-knowledge proof technology has also developed rapidly. zk-snark is a compact non-interactive zero-knowledge proof protocol, in which the polynomial division algorithm is implemented by the fast Fourier transform algorithm, which requires that the order of the bilinear pair used by zk-snark satisfy formula: n-1|220. However, the bilinear pairing used in the current national secret SM9 algorithm does not meet this requirement. If the direct replacement with the existing bilinear pair is directly used, the performance of zk-snark will be greatly reduced. In this paper, based on the BN curve to construct a bilinear pairing method, a national secret substitution of zk-snark bilinear pairnally densified scheme of zk-snark bilinear pairing is proposed. Under the premise of not affecting the performance of zk-snark, the security requirements of the national secret are met, so that zk -snark can be applied to national secret products.

Key words: information security, bilinear pair, BN curve, zk-snark, SM9

中图分类号: