<p>Security and efficiency have always been two critical factors in the development of post-quantum digital signatures. As the best-known scheme, <Emphasis FontCategory="SansSerif">Dilithium</Emphasis> (Ducas et al., TCHES 2018) is SUF-CMA in QROM and has a relatively fast efficiency with many untrivial optimizations. The goal of this paper is to propose some techniques that can promote signing speed without sacrificing security. We first propose the pre-rejection sampling technique in <Emphasis FontCategory="SansSerif">KeyGen</Emphasis> stage to reduce the rejections of the fourth condition, consequently resulting in some speedup in <Emphasis FontCategory="SansSerif">Sign</Emphasis> stage. To prove security, we propose the <i>c</i>-selected MLWE problem, a variant of MLWE that can offer the equivalent security as original MLWE. Applying these two techniques to <Emphasis FontCategory="SansSerif">Dilithium</Emphasis>, we obtain an advanced signature scheme with better efficiency, and without any other losses except some pre-computations. Security reduction demonstrates that our scheme is also SUF-CMA in QROM. The experimental results show that pre-rejection sampling achieves a <InlineEquation ID="IEq1"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="42400_2024_325_Article_IEq1.gif" Format="GIF" Height="16" Rendition="HTML" Resolution="72" Type="Linedraw" Width="31" /> </InlineMediaObject> <EquationSource Format="TEX">\(47\%\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mn>47</mn> <mo>%</mo> </mrow> </math></EquationSource> </InlineEquation>, <InlineEquation ID="IEq2"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="42400_2024_325_Article_IEq2.gif" Format="GIF" Height="16" Rendition="HTML" Resolution="72" Type="Linedraw" Width="31" /> </InlineMediaObject> <EquationSource Format="TEX">\(22\%\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mn>22</mn> <mo>%</mo> </mrow> </math></EquationSource> </InlineEquation>, and <InlineEquation ID="IEq3"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="42400_2024_325_Article_IEq3.gif" Format="GIF" Height="16" Rendition="HTML" Resolution="72" Type="Linedraw" Width="31" /> </InlineMediaObject> <EquationSource Format="TEX">\(17\%\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mn>17</mn> <mo>%</mo> </mrow> </math></EquationSource> </InlineEquation> reduction in the rejection probability of the fourth condition over <Emphasis FontCategory="SansSerif">Dilithium</Emphasis> scheme when the parameter set corresponds to NIST’s security levels 2, 3 and 5, respectively. This type of reduction increases signing speed by approximately <InlineEquation ID="IEq4"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="42400_2024_325_Article_IEq4.gif" Format="GIF" Height="16" Rendition="HTML" Resolution="72" Type="Linedraw" Width="23" /> </InlineMediaObject> <EquationSource Format="TEX">\(1\%\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mn>1</mn> <mo>%</mo> </mrow> </math></EquationSource> </InlineEquation> under the parameter set 2 of <Emphasis FontCategory="SansSerif">Dilithium</Emphasis>.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Speedup signing: pre-rejection sampling towards dilithium

  • Lianglin Yan,
  • Ming Luo,
  • Mingsheng Wang

摘要

Security and efficiency have always been two critical factors in the development of post-quantum digital signatures. As the best-known scheme, Dilithium (Ducas et al., TCHES 2018) is SUF-CMA in QROM and has a relatively fast efficiency with many untrivial optimizations. The goal of this paper is to propose some techniques that can promote signing speed without sacrificing security. We first propose the pre-rejection sampling technique in KeyGen stage to reduce the rejections of the fourth condition, consequently resulting in some speedup in Sign stage. To prove security, we propose the c-selected MLWE problem, a variant of MLWE that can offer the equivalent security as original MLWE. Applying these two techniques to Dilithium, we obtain an advanced signature scheme with better efficiency, and without any other losses except some pre-computations. Security reduction demonstrates that our scheme is also SUF-CMA in QROM. The experimental results show that pre-rejection sampling achieves a \(47\%\) 47 % , \(22\%\) 22 % , and \(17\%\) 17 % reduction in the rejection probability of the fourth condition over Dilithium scheme when the parameter set corresponds to NIST’s security levels 2, 3 and 5, respectively. This type of reduction increases signing speed by approximately \(1\%\) 1 % under the parameter set 2 of Dilithium.