CAJ | 학술논문

提出了一种新的基于双线性对的乐观Mix-net协议。利用双线性对工具简化了密钥管理，在不同的协议会话中服务器端不用重新生成密钥，并且当前会话不会为其他会话提供解密预言机服务。采用了“哑元追踪法”保证混洗过程的完整性，简化了正确性证明的构造。对ElGamal联合解密过程做了优化，降低了每个服务器节的指数运算量。在没有服务器作弊的情况下，对输入密文组的混洗和解密速度比其他可公开验证的Mix-net方案高得多。
제출료일충신적기우쌍선성대적악관Mix-net협의。이용쌍선성대공구간화료밀약관리，재불동적협의회화중복무기단불용중신생성밀약，병차당전회화불회위기타회화제공해밀예언궤복무。채용료“아원추종법”보증혼세과정적완정성，간화료정학성증명적구조。대ElGamal연합해밀과정주료우화，강저료매개복무기절적지수운산량。재몰유복무기작폐적정황하，대수입밀문조적혼세화해밀속도비기타가공개험증적Mix-net방안고득다。
A novel pairing-based optimistic Mix-net scheme was proposed. The key management is made easier by em-ploying bilinear paring primitives and there is no need for the participating mix servers to re-generate keys jointly be-tween mix-sessions to avoid providing decryption oracle service to other mix-sessions. Integrity of messages during mix-ing is partially guaranteed by using“dummy messages tracing”technology resulting in a simpler construction for proofs of correctness. An optimization method for the joint ElGamal decryption involved in the protocol was also proposed, which can reduce the number of exponentiations computed by each mix server. The Mix-net will shuffle and decrypt in-put ciphertexts much faster than all previous Mix-nets with public verifiability when all mix servers execute the mixing protocol honestly.