首页|期刊导航|华南理工大学学报(自然科学版)|类CSIDH抗量子密钥交换协议的设计与加速

类CSIDH抗量子密钥交换协议的设计与加速OA

Design and Acceleration of CSIDH-Like Post-Quantum Key Exchange Protocols

中文摘要英文摘要

量子计算的快速发展威胁着现有公钥密码体制,基于同源的密码体制便是推动抗量子密码研究的重要组成部分.基于可交换超奇异同源的密钥交换协议(CSIDH)因兼具安全性与效率,成为目前少数可用的同源密钥交换协议之一.该文针对类CSIDH系列协议进行研究与加速,利用特征为p ≡ 7(mod 8)的素域上的、自同态环同构于O=Z[√-p]的Montgomery超奇异椭圆曲线,构造了新的基于同源的密钥交换协议CSIDH-G,并证明了Montgomery超奇异椭圆曲线系数与曲线同构类的一一对应关系,以确保协议中公钥规模低的优势.与此同时,证明了该协议中不存在CSIDH协议中阶为3的密钥碰撞和CSURF协议中阶为1的密钥碰撞,并提出了紧凑的用户私钥选取区间.最后,开展了协议运行效率实验,通过扩大3-同源和5-同源等低阶同源的指数选择区间等优化密钥选取区间的方式.结果表明,该文所提协议比原始CSIDH协议运行效率提高约5.95%,验证了协议的准确性和有效性.该算法具有提升同源密钥交换协议效率、保证公钥验证过程简洁、避开现有CSIDH系列协议中私钥碰撞、增加Diffie-Hellman形式抗量子密码体制多样性等多方面优势.

The rapid development of quantum computing poses a threat to existing public-key cryptographic systems,and isogeny-based cryptography has become an important component in advancing post-quantum cryptographic research.The CSIDH protocol,owing to its balance of security and efficiency,is one of the few practical isogeny-based key exchange protocols available today.This paper investigates and accelerates CSIDH-like protocols by utilizing Montgomery supersingular elliptic curves defined over a prime field with p≡7(mod 8),whose endomorphism ring is isomorphic to O=Z[√-p].And a new isogeny-based key exchange protocol called CSIDH-G is constructed.The paper establishes a one-to-one correspondence between the coefficients of Montgomery supersingular elliptic curves and their isomorphism classes,hereby preserving the advantage of low public key size.Furthermore,it is proved that the proposed protocol avoids the key collisions of order 3 present in CSIDH and those of order 1 in CSURF,and a compact interval for user private key selection is proposed.Finally,experiments on protocol efficiency are conducted.By optimizing the key selection interval,specifically,by expanding the exponent selection ranges for low-degree isogenies such as 3-isogenies and 5-isogenies,the proposed protocol achieves about a 5.95%improvement in operational efficiency over the original CSIDH protocol,validating its accuracy and effectiveness.This algorithm offers multiple advantages,including improved efficiency of isogeny-based key exchange protocols,simplicity in the public key verification process,avoidance of private key collisions existing in current CSIDH-like protocols,and increased diversity in Diffie-Hellman-style post-quantum cryptographic systems.

樊雪君;赵飞;徐秀

中国人民公安大学 信息网络安全学院,北京 102623中国电力科学研究院,北京 100192中国信息通信研究院云计算与大数据研究所,北京 100191

信息技术与安全科学

抗量子密码同源密码密钥交换协议CSIDH协议Montgomery超奇异椭圆曲线

post-quantum cryptographyisogeny-based cryptographykey exchange protocolcommutative supersingular isogeny Diffie-Hellman(CSIDH)protocolMontgomery supersingular elliptic curve

《华南理工大学学报(自然科学版)》 2026 (5)

77-84,8

中国人民公安大学中央高校基本科研业务费专项资金项目(2025JKF02ZK11)国家自然科学基金项目(52306199)Supported by the National Natural Science Foundation of China(52306199)

10.12141/j.issn.1000-565X.250174

评论