计算机科学
理论计算机科学
密钥交换
协议(科学)
同生
椭圆曲线
作者
Satoshi Furukawa,Noboru Kunihiro,Katsuyuki Takashima
出处
期刊:International Symposium on Information Theory and its Applications
日期:2018-10-01
卷期号:: 208-212
被引量:10
标识
DOI:10.23919/isita.2018.8664316
摘要
When large-scale quantum computers are implemented, several cryptosystems based on the hardness of factoring and discrete logarithm problems will be broken. Hence, it is desirable to construct quantum-resistant cryptographic protocols. Although several candidates are introduced for hard problem, the computational hardness of finding isogenies between two supersingular elliptic curves (supersingular isogenies) is promising among them. It is strongly believed that the computation of supersingular isogenies requires exponential time even in the quantum computers. In this paper, we propose quantum-resistant multi-party key exchange protocols. First, we introduce several assumptions related to supersingular isogenies, which includes a generalization of supersingular isogeny decisional Diffie–Hellman (SSDDH) assumption which is called GSSDDH assumption. We present a construction of the n-party key exchange protocol based on the GSSDDH assumption. It is n − 1-round protocol and can be considered as a natural extension of 2-party 1-round supersingular isogeny Diffie–Hellman (SIDH) protocol, and we call it generalized SIDH (GSIDH) protocol. We then propose an n-party 2-round key exchange protocol by combining SIDH with the idea of Burmester–Desmedt (BD) key exchange, which significantly reduces the number of rounds. This protocol is called SIBD protocol and is based on the SSDDH assumption.
科研通智能强力驱动
Strongly Powered by AbleSci AI