Author Login Chief Editor Login Reviewer Login Editor Login Remote Office

Computer Engineering ›› 2025, Vol. 51 ›› Issue (10): 203-212. doi: 10.19678/j.issn.1000-3428.0069288

• Cyberspace Security • Previous Articles     Next Articles

Efficient Linkable Ring Signature Scheme

ZHAO Jiangdong, CHEN Hu*(), WANG Xiaoyi   

  1. College of Mathematics and Statistics, Jiangsu Normal University, Xuzhou 221116, Jiangsu, China
  • Received:2024-01-23 Revised:2024-05-27 Online:2025-10-15 Published:2025-10-29
  • Contact: CHEN Hu

高效的可链接环签名方案

赵姜冬, 陈虎*(), 王晓毅   

  1. 江苏师范大学数学与统计学院,江苏 徐州 221116
  • 通讯作者: 陈虎
  • 基金资助:
    江苏师范大学博士科研项目(16XLR031); 江苏省研究生科研创新计划项目(2022XKT0950); 江苏省研究生科研创新计划项目(2022XKT0951)

Abstract:

A linkable ring signature, which is a special type of ring signature, can aid in verifying whether two signatures have been signed by the same user, without compromising anonymity. This feature enables it to play an important role in blockchains. However, most of the currently available linkable ring signature schemes are inefficient, and some of them are at risk of being forged owing to the signature labels. This study constructs a new lattice-based linkable ring signature scheme using rejection sampling, in which a formal security proof of the unforgeability of linkable ring signatures is provided in a random oracle model. Unlike existing schemes with a multi-round Hash function to hide user identity, this scheme places the user′s identity characteristics into verification public keys. In other words, the real signer first expands the private key according to certain rules to form an effective ring signature private key and then uses rejection sampling technology to make the linkable ring signature indistinguishable. Consequently, the number of matrix vector multiplication operations in the scheme is reduced, improving its efficiency and shortening the signature size. Furthermore, the private keys of this scheme are jointly generated by the key generation center and users, and the label is multiplied by the private key and the public matrix. This scheme solves the problem faced by some existing schemes, i.e., legitimate users can maliciously forge labels when signing, while ensuring the anonymity of ring signatures. In addition, the linkability can be proven using a random oracle model. The results show that this scheme has advantages in terms of computational efficiency and signature size.

Key words: lattice-based cryptography, linkable ring signature, rejection sampling, random oracle model, Small Integer Solution (SIS)

摘要:

可链接环签名作为一种特殊性质的环签名,能够在保持匿名性的同时验证两个签名是否为同一用户所签。这种良好的性质让它在区块链中发挥着重要作用。然而,现有的可链接环签名方案大都效率不高,且部分方案中所使用的标签存在被伪造的风险。利用拒绝抽样技术构建一个新的基于格的可链接环签名方案,并且给出了随机预言模型下可链接环签名具有不可伪造性的形式化安全证明。不同于现有的利用多轮哈希函数来隐藏用户身份的方案,该方案将用户身份特征隐藏到验证公钥中,即真实的环签名者先将私钥按一定规则扩充形成有效的环签名私钥,再利用拒绝抽样技术使得生成的可链接环签名具有不可区分性,减少整个方案的矩阵向量乘法运算次数,从而提高方案效率,缩短签名尺寸。该方案的私钥由秘钥生成中心与用户共同生成,标签由私钥与公共矩阵相乘,在保证环签名匿名性的同时解决了部分现有方案中合法用户在签名时可以恶意伪造标签的问题。此外,给出了随机预言模型下可链接性的安全证明。实验结果表明,该方案在运算效率和签名尺寸方面均具有优势。

关键词: 格密码, 可链接环签名, 拒绝抽样, 随机预言模型, 小整数解