Despite the importance of preimage sampling algorithm in lattice-based cryptography, its low efficiency limits its applications. In this study, we propose a family of gadget-based trapdoors on NTRU lattice. Our construction is compatible with existing efficient preimage sampling algorithms and offer compact secret. Comparison with two trapdoor schemes of [10], the hash-and-sign signature scheme based on our trapdoor scheme has better security and the sizes of secret and signature are reduced. In the first scheme, the sizes of public key and secret key are 6.25 kB and 5.0 kB for an estimation of 63.95-bit security. In the second one, they are 6.25 kB and 5.0 kB for an estimation of 75.92-bit security. Our proof-of-concept shows that the sizes of secret key and public key can be reduced to 0.88 kB and 3.06 kB for an estimation of 86.72-bit security.
原文链接
分享
引用
