高级检索

    基于水下物联网的多方密钥封装方案

    Multi-Party Key Encapsulation Mechanism Based on the Internet of Underwater Things

    • 摘要: 为了抵抗量子计算的攻击,保护水下节点的隐私与数据安全,利用NTRU密码体制的困难性假设提出了一种基于水下物联网的多方密钥封装方案SeaNTRU.首先,结合海洋传感器声波序列和水声声波因子生成设备序列号的伪身份并设计了一种可验证身份的海洋声波消息码. 其次,利用正交频分复用(orthogonal frequency division multiplexing,OFDM)频域过采样技术和数论变换(number theoretic transform,NTT)设计了一种适用于水声通信的密钥生成算法. 在此基础上,利用身份绑定的混合加密和基于海洋噪声的混淆操作构造了具有选择明文攻击下的不可区分性和匿名性(indistinguishability and anonymity under chosen plaintext attack,IND-Anon-CPA)安全的多方公钥加密算法. 然后,提出了一种基于海洋噪声的SeaFO变换,并由此得到具有选择密文攻击下的不可区分性和匿名性(indistinguishability and anonymity under chosen ciphertext attack,IND-Anon-CCA)安全的多方密钥封装算法,该算法不需要执行全部的重加密过程. 最后,设计了一种新的会话密钥更新机制. 在该会话密钥更新机制中,水下自主机器人利用OFDM子载波提取密文分量并进行伪身份和时间标记有效性的检验,通过使用SeaFO变换解封装得到新的会话密钥,不仅实现了多方环境下的隐式拒绝,也防止了敌手对于SeaNTRU的自适应破坏. 通过安全性分析,证明了SeaNTRU具有抗公钥替换攻击、抗重放攻击和抗中间人攻击的特性. 实验结果表明,SeaNTRU比现有方案计算成本和通信开销小.

       

      Abstract: In order to resist attacks of quantum computing and protect the privacy and data security of underwater nodes, a multi-party key encapsulation mechanism based on the Internet of underwater things is proposed using the difficulty assumption of NTRU cryptographic system.Firstly, the pseudo-identities of device serial numbers are generated by combining ocean sensor acoustic sequences and underwater acoustic waveform factorization, and a verifiable identity ocean acoustic message code is designed.Secondly, a key generation algorithm suitable for underwater communication is designed using orthogonal frequency division multiplexing (OFDM) frequency domain oversampling technique and number theoretic transform (NTT).On this basis, a multi-party public key encryption algorithm with indistinguishability and anonymity under chosen plaintext attack (IND-Anon-CPA) security is constructed using identity-bound hybrid encryption and ocean noise-based obfuscation operation, Thirdly, a SeaFO transform based on ocean noise is introduced to develop a multi-party key encapsulation algorithm with indistinguishability and anonymity under chosen ciphertext attack (IND-Anon-CCA) security without full re-encryption process.Finally, a novel session key update mechanism is devised where autonomous underwater vehicles verify ciphertext components and assess pseudo-identity and timestamp validity using OFDM subcarriers. The new session keys are decapsulated using SeaFO transform, which not only achieve implicit rejection in multi-party environments and but also thwart adversaries’ adaptive corruption on SeaNTRU.Security analysis demonstrates that SeaNTRU has the characteristics of resistance to key replacement attack, replay attack, and man-in-the-middle attack.Experimental results show that SeaNTRU has lower computational cost and communication overhead than the existing schemes.

       

    /

    返回文章
    返回