• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>International conference on information and communications security >PoS: Constructing Practical and Efficient Public Key Cryptosystems Based on Symmetric Cryptography with SGX
【24h】

PoS: Constructing Practical and Efficient Public Key Cryptosystems Based on Symmetric Cryptography with SGX

机译：PoS：使用SGX构建基于对称密码的实用高效的公共密钥密码系统

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Public key cryptosystems (PKCs) often rely on public key algorithms based on mathematical problems that currently admit no efficient solution, such as integer factorization and discrete logarithm, which are relatively computationally costly compared with most symmetric key algorithms of equivalent security. In this paper, we propose PoS, constructing practical and efficient PKCs based on symmetric cryptography with SGX. To achieve this, we separate private and public operations into dedicated private and public SGX enclaves, hosted on the recipient and sender sides respectively, and leverage the security mechanisms provided by SGX to make symmetric keys shared between private enclave and public enclave, while being kept secret from the sender, by limiting the shared keys within public enclave and not exportable. PoS gains security guarantees when the security assumptions of SGX and symmetric cryptography stand. To demonstrate the practicality and efficiency of the PKCs constructed on PoS, we have constructed, implemented, and benchmarked two PKCs based on PoS, PKE-PoS and IBE-PoS. The evaluation results show that both PKE-PoS and IBE-PoS gain excellent performance: the performance of PKE-PoS is up to 195 times of that of RSA-2048, and the performance of IBE-PoS is up to 4 orders of magnitude higher than that of Boneh-Franklin IBE.
机译：公钥密码系统（PKC）通常依赖于基于数学问题的公钥算法，这些数学问题目前尚不接受有效的解决方案，例如整数分解和离散对数，与同等安全性的大多数对称密钥算法相比，它们的计算成本较高。在本文中，我们提出了PoS，使用SGX基于对称密码构造实用且有效的PKC。为了实现这一目标，我们将私有和公共业务划分为专用的私有和公共SGX安全区，分别托管在接收方和发送方，并利用SGX提供的安全机制在私有安全区和公共安全区之间共享对称密钥，同时将其保留下来。通过将共享密钥限制在公共区域内并且不可导出，将发件人的机密保密。当SGX和对称密码学的安全性假设成立时，PoS将获得安全性保证。为了证明基于PoS构建的PKC的实用性和效率，我们基于PoS，PKE-PoS和IBE-PoS构建，实施和基准化了两个PKC。评估结果表明，PKE-PoS和IBE-PoS均具有出色的性能：PKE-PoS的性能高达RSA-2048的195倍，IBE-PoS的性能高出4个数量级。比Boneh-Franklin IBE的要好。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号