Chng 9

CH K S
9.1 Tng quan v ch k s Chng ta c th hiu nm na v ch k s in t nh sau: l nhng thng tin i km vi liu nh!m "#c $nh ch% c%a ng&i g'i n( Ch k s in t )a* g+m , thnh -h.n: thu/t t*#n t0* 1a kha2 hm t0* ch k v hm kim t1a ch k( 3m t0* 1a ch k l hm t4nh t*#n ch k t15n c6 s' kha m/t v liu c.n k( 3m kim t1a ch k l hm kim t1a "7m ch k 8 ch* c ng vi kha cng c9ng khng( :ha n; m<i ng&i c =u;n t1u; c/- ch* n5n m<i ng&i u c th kim t1a >c ch k( nh ngha: ?6 + ch k )a* g+m c#c thnh -h.n sau @( :hng gian )An 1B C( D( :hng gian ch k ?( ,( :hng gian kha : t0* n5n ch k2 khng gian kha :E kim t1a ch k( F( Ghu/t t*#n hiu =uA t0* n5n kha H7n: N K K I 2 ' J; : v :E t6ng Kng vi khng gian kha m/t v kha cng c9ng( L( Ghu/t t*#n t0* ch k ?ign: M K S ( M( Ghu/t t*#n kim t1a ch k N71iO;: M K K I {True2 False} ( Pi vi )Qt kR kha t0* ch k sk K v )Qt kR )An tin m M lnh k )Kc in >c k hiu:
s Signsk T mS (

Uiu thKc n; >c <c nh sau: sV l ch k c%a )An tin m >c t0* 1a nh& thu/t t*#n ?ign v kha m/t sk( Pi vi )Qt kR kha m/t c%a ch k sk K 2 t6ng Kng vi kha cng c9ng kim t1a ch k l
pk K I 2

)Qt kR )An tin m M v ch k s S c.n thWa m8n iu kin sau:

True2 if Verify pk Tm2sS = False2 if

s = Signsk T m S s Signsk T m S

U'i vX ti liu c.n k th&ng c chiu i kh# i( C9t )in -h#- k l chia ti liu 1a c#c *0n nhW v sau k l5n tYng *0n v ghZ- l0i( [hng -h6ng -h#- c nh>c im l ch k ln2 thK hai l k ch/m vX hm k l c#c hm m\2 thK )a l ch k c th )$ A* l*0n c#c v$ t14 khng Am t4nh ngu;5n v]n c%a ti liu( Ch4nh vX iu m khi k thX ng&i ta k l5n gi# t1$ hm hash c%a ti liu2 vX gi# t1$ c%a hm hash lun ch* chiu i "#c $nh( 3m hash s^ >c "7m t1*ng ch6ng sau( Chc nng ca ch k! s" #i$n %&: _#c th`c >c ngu+n gc ti liu : Gu; thu9c v* tYng )An tin m c th th5m c#c thng tin nh/n 0ng2 nh t5n t#c giA2 nhAn th&i gianavv( G4nh t*n v]n ti liu( NX khi c m9t s` tha; )Qt kR v tXnh ha; c l5n )Kc in thX g4a t1$ hm hash s^ )$ tha; bi v kct =uA kim t1a )Kc in s^ khng ng( Chng tY chi )Kc in( NX chd c ch% c%a )Kc in mi c kha m/t k )Kc in( C'c kh( nng %)n c*ng #"i +,i ch k! #i$n %&: @( G9i -h0m c th giA m8 m0* ch k t6ng Kng vi ven )An 8 ch<n( D( G9i -h0m th ch<n )Kc in m t6ng Kng vi ch k 8 ch*( ,( G9i -h0m c th en t19m kha m/t v c th k )Qt kR m9t )Kc in n* n mun ging nh ch% c%a kha m/t( F( G9i -h0m c th 8 m0* ng ch% k m9t )Kc in n* ( L( G9i -h0m c th bi kha cng c9ng )'i kha c%a mXnh( 9.2 S !" ch k s #S$ ?6 + ch k f?g >c hiOOi7V37llman "uQt v >c f*nal iinn fiv7st2 g i ?hami1 v i7*na1 g l7man th`c hin( S !" ch k #S$ T%& kh'a: ju# t1Xnh t0* kha ch* s6 + ch k f?g ging nh =u# t1Xnh hXnh thnh kha c%a h m/t f?g2 tKc l: glic7 ch<n ck- s ngu;5n t % ln - v =2 vi m8n -h6ng t1Xnh e0 @Tm* T N SS ( ? l kha m/t c%a glic7( T%& ch k:
m P t0* 1a ch k s c%a )Kc in m 1 N glic7 t0* 1a s

- p

2 t4nh [l-=(

Ch<n s ngu;5n 7 thWa m8n .C/N Te2T N SS =@ ( glic7 i "#c $nh s ngu;5n 2 thWa

s = Sign0 TmS m 0 Tm* N S (

Ghnm t1a ch k:

P thnm t1a ch k s c -hAi c%a glic7 k khng thX U*) kim chKng )!ng th% toc sau: N71iO;T[27STm2sSlGfpq2 ncu nh m s e Tm* N S ( fB 1ng chng ta thQ; 1!ng =a t1Xnh t0* ch k v thnm t1a ch k ging vi =u# t1Xnh m8 v giAi m8 c%a h m/t f?g chd kh#c l =u# t1Xnh t0* ch k glic7 rng kha m/t csn =u# t1Xnh thnm t1a thX U*) rng kha cng c9ng( ()n *u+n v !, an -&)n c.a s !" ch k s #S$: [cu s6 & k s th`c hin 6n giAn nh t15n thX t9i -h0m Ttsca1S u ng lYa( N4 o
m nh tsca1 c th ch<n ngvu nhi5n s 1 N v t4nh t*#n 9 ln:

m s e Tm* N S (

GhX 1B 1ng =u# t1Xnh thnm t1a Tm2sS l h*n t*n ng( [g*i 1a * t4nh chQt nhJn c%a hm f?g2 tKc l ncu c hai )Kc in m @ v mD t6ng Kng vi n l D ch k s @ v sD thX u ng hXnh thnh ch k thK )a s@sD vi )Kc in thK )a m@mD:
0 Tm@mD S 0 = m@0 mD = s@sD (

P chng l0i s` giA m0* ch k th7* -h6ng -h#- t15n thX m9t -h6ng -h#- 6n giAn l th5m thng tin -ho v* )Kc in C2 c nghwa l mlCxxy2 ' J; y l Qu hiu nh/n 0ng v4 o nh ylzt5n t#c giAz( [g*i 1a kct h>- vi vic k l5n gi# t1$ hm hash c%a )Kc in2 tKc l k l5n gi# t1$: mlhashTCS( vX nhng t4nh chQt c%a hm hash s^ chng l0i khA neng giA m0* t15n t1Y "#c suQt 1Qt nhW2 vX ncu kh c th tXm >c )Kc in m gi# t1$ hash c%a n t1rng vi gi# t1$ hm hash 8 ch*( 9./ S !" ch k #a01n ?6 + ch k c%a fa)in 1Qt ging s6 + ch k f?g( ?` kh#c nhau gia chng chd n!m ' =u# t1Xnh thnm t1a ch k( G1*ng s6 + ch k f?g thX tham s 7 l s l{ )'i vX thWa m8n iu kin gc T72 T N S Sl@2 T N S l s ch|n2 csn t1*ng s6 + fa)in 7lD( Chng ta "7m co th =u# t1Xnh k c%a s6 + fa)in( S #2 ch k! 3a4in: T%& kh'a:

ju# t1Xnh t0* kha c%a s6 + ch k fa)in ging nh =u# t1Xnh t0* kha c%a s6 + ch k f?g( GKc l ch<n hai s ngu;5n t kh#c nhau - v = c 9 ln g.n )!ng nhau v t4nh [l-=( ? [ l kha m' c%a glic72 csn s -2 = l kha m/t( T%& ch k:
m P t0* ch k ch* )Kc in m 1 N glic7 t4nh gi# t1$:

s m@ } D Tm* N S (

' J; chng ta thQ; t0* n5n ch k s thX m -hAi thu9c jf [( glic7 c th ch<n c6
m chc th4ch h>- t0* n5n m( Ch c cn ~ s -h.n t c%a nhm 1 N thu9c v jf[ n5n

glic7 hXnh thnh m l khng kh( Th23 -4a ch k: P thnm t1a ch k U*) "7m th% toc sau: N71iO;T[STm2sSlGfpq2 ncu nh m s D Tm* N S ( ?6 + ch k fa)in c nhng u im h6n s* vi s6 + f?g( GhK nhQt l giA m0* ch k l -hKc t0- nh l -hJn t4ch s ngu;5n 1a thYa s ngu;5n t( GhK hai l vic thnm t1a ch k h*n thnh nhanh h6n v hsan t*n thu/n l>i th`c thi c#c Kng ong( N chng l0i c#c c#ch tQn cng nh t1*ng f?g thX =u# t1Xnh k c\ng th5m nhKng thng tin -ho v s ong hm hash( 9.5 S !" ch k 6*ga3a ?6 + ch k qlgamal >c gii thiu nem @L( ?6 + n; thict kc nh 1i5ng ch* ch k s kh#c vi s6 + f?g nh chung ch* cA h thng m8 cng khai v ch k s( S #2 ch k! s" 5lgamal: T%& kh'a: ju# t1Xnh t0* kha ging nh =a t1Xnh t0* kha c%a h m/t qlgamal2 tKc l glic ch<n
m s ngu;5n t - % ln )i t*#n l*ga1ith 1&i 10c t15n - l kh giAi2 v ch<n 1 p l

-h.n t ngu;5n th%;2 ch<n 6 7 < p @ l s ngu;5n lm kha m/t v t4nh kha cng c9ng ;gl 6 Tm* p S (
7

T%& ch k:
m P k l5n )Kc in m 1 N glic7 t0* 1a s ngvu nhi5n k thWa m8n

k < p @ v

pCi[Tk2-V@Sl@ v hXnh thnh n5n ch k l ck- T12sS2 ' J;

r k Tm* p S2 s k @ T m 6 7 r STm* p @S(

Th23 -4a ch k:

P thnm t1a ch k T12sS U*) "7m kct =uA c%a hm kim t1a: N71iO;T
2;g2-S
r s m Tm2T12sSSlGfpq2 ncu nh 1 - v y 7 r Tm* pS (

Chng ta "7m s` ng n c%a -h6ng t1Xnh thnm t1a ch k:

r s y7 r = 6 7 r k k
@

Tm 6 7r S

Tm* pS = m Tm* pS (

Chng ta thQ; glic7 hXnh thnh ch k vi kha m/t " g v cA s ngu;5n ngvu nhi5n k( Nic thnm t1a ch k chd )!ng thng tin cng khai( 78 9:: HiA s glic7 ch<n -lFM2 = D 2"gl@D( glic7 i t4nh kha cng khai ;g

y 7 = 6 7 Tm* pS lD@D m* FMl@,D

glic7 mun k l5n )Kc in ml@2 thX glic7 ch<n s ngvu nhi5n k2 v4 o glic7 ch<n klD@, TpCi[TD@,2FMSl@S v t4nh D@,V@Tm* FMMSlF,@( :hi : 1lDD@, m* FMlD slF,@T@V@D(DS m* FMMlL@ U*) ha; )Qt kR ai c\ng c th thnm t1a >c ch k n; )!ng c#ch:
@,D D DL@ @Tm* FMS D@ @Tm* FMS

N/; ch k l h>- l( Ch8ng %a #'nh gi' #9 an %:;n ca s #2 ch k! 5lgamal -ua m9% s" c(nh 4': sau< C;nh 0;& 1( P.u ti5n kim t1a ch k thX c.n -hAi kim t1a )Qt |ng thKc 1 -( [cu nh 1 thX c khA neng )$ tQn cng2 c#ch n; "uQt )'i Ul7ich7n)ach71( HiA s T12sS l ch k c%a )Kc in m( G9i -h0m c th gi8 m0* ch k vi m9t )Kc in )Qt kR mE )!ng c#ch hXnh thnh nh sau: @( u mI m @ Tm* p @S D( s I = su Tm* p @S ( ,( G4nh 1E2 thWa m8n iu kin r I ru Tm* p @S v r I r Tm* pS ( Piu n; c th lm >c nh& #- ong $nh l -h.n G1ung 3*a( Chng ta thQ; )Kc in mE vi ch k T1E2sES thWa m8n iu kin:
r I sI ru su r s u y7 rI = y7 r T y7 r S mu m I Tm* p S

GQn cng kiu nh thc n; l khng th ncu nh 1 -2 )'i vX t1*ng t1&ng h>- n; gi# t1$ 1E >c t4nh t*#n th7* )c , Kng ong $nh l -h.n G1ung 3*a th7* m* ul* -T-V @S(

C<nh 0;& 2( CAnh )#* n; c\ng hXnh thnh )'i Ul7ich7n)ach71( glic7 c.n -hAi l`a ch<n -h.n t ngvu nhi5n tY nhm
1m p

( [cu nh tham s n; khng >c l`a ch<n )'i glic7 Tiu

n; l c th2 khi h thng ng&i s ong c m9t tham s m' v -S2 thX c.n -hAi kim t1a m9t s l.n 1!ng l s ngvu nhi5n Tiu n; c th #- ong hm t0* s giA ngvu nhi5nS( HiA s 1!ng c#c tham s m' v - >c l`a ch<n )'i t9i -h0m tsca1( Gham s hXnh thnh t15n c6 s' -h6ng -h#- chunn: HiA s -V@l)=2 vi = l s ngu;5n t % ln2 nhng ) c th c thYa s ngu;5n t nhW2 v t4nh t*#n l*ga1ithm t1*ng nhm )/c ) khng khS( tsca1 hXnh thnh tham s th7* c#ch sau:
= % Tm* p S 2

Ni = c- v c )( Chng ta )ict 1!ng vic t4nh t*#n l*ga1ith 1&i 10c c%a kha m' ; g l )i t*#n kh( Ghc
nhng t4nh t*#n l*ga1ith c%a 9 ln y 7 th7* c6 s - khng t0* n5n m9t s` kh kh*en

n*( i*ga1ith 1&i 10c n; )!ng = 6 7 Tm* 4S 2 c nghwa thWa m8n +ng thKc sau:
y7 = T - S = Tm* p S

:hi t4nh >c gi# t1$ thX tsca1 c th giA m0* ch k c%a glic7 )!ng c#c lnh sau J;:
r = c-2 s % T m c-= STm* p @S(

Chng ta "7m vic thnm t1a ch k:

r s % T m c-= S y7 r y c c-= m c-= m Tm* p S 7 T S

fB 1ng chng ta thQ; ck- T12sS l ch k c%a )Kc in m2 nhng vic t0* thnh ch k n; khng c s` tham gia c%a kha m/t "g Tm c s` tham gia c%a s "g Tm* )SS( Ch 1!ng t1*ng =u# t1Xnh hXnh thnh ch k giA m0* thX s = l c s c%a 1( hvn 5n c#ch tQn cng c%a Ul7ich7n)ach71 c th ngen chkn ncu nh t1*ng lc kim t1a U*) kim t1a iu kin = khng l c s c%a 1 TgiA s 1!ng =u# t1Xnh l`a ch*n - thX = l tham s m'S( C<nh 0;& /( G1*ng cAnh )#* n; thX li5n =uan cn chiu i c%a tham s k( G0* 1a ch k th7* s6 + qlgamal l thu/t t*#n ngJu nhi5n )'i vX tham s k >c hXnh thnh ngvu nhi5n(

glic7 khng )a* gi& rng kha k c#c )Kc in kh#c nhau l c th&i gian sng ngn( [cu nh tham s k s ong t1' l0i i vi ch k c%a hai )Kc in m @ v mD2 m hai )Kc in thWa m8n m@ mD Tm* p @S 2 thX tY -h6ng t1Xnh t4nh s c%a s6 + ch k chng ta c:
l T s@ sD S m@ mD Tm* p @S (

U'i vX l @ Tm* p @S t+n t0i2 v tY )Qt |ng thKc m@ mD Tm* p @S vn cn:

l @ T s@ sD S }T m@ mD STm* p @S 2
@ C nghwa l )$ l9( [hng =uan t1<ng nhQt l kha m/t glic7 " g c th t4nh t*#n tY

cng thKc hXnh thnh s2 v su; 1a "g th7* cng thKc:

6 7 Tm@ ls@ S } r Tm* p @S (

Piu n; ch* chng ta thQ; chd >c s ong tham s k m9t l.n u; nhQt( =g>n ch?n -@n cAng g1< 3%& 6B1s-Cn-1a* D&4gC4E PJ; l c#ch tQn cng `a v* )Kc in khng )a* g+m thng tin -ho nh/n 0ng( Chng ta tXm hiu m9t s c#ch hXnh thnh )Kc in v ch k giA m0*( C;ch -hF nh@-( HiA s u v v l c#c s ngu;5n )Qt kR2 nhW h6n -V@ v thWa m8n iu kin pCi[Tv2 -V@Sl@( Chng ta h*n thnh m9t s lnh sau:
r u y + pS 7 Tm* s r+ @ Tm* p @S m ru+ @ Tm* p @S

Chng ta "7m Tm2T12sSS s^ l ch k ng nh glic7 th`c hin2 )!ng c#ch kim t1a -h6ng t1Xnh sau:
r r+ r + r+ r + r+ r r yrr s y7 r y7 T u y 7 S y7 T u S r+ T y 7 S y7 ru+ y 7 ru+
@ @ @ @
@
@

m Tm* p S

C;ch -hF ha1( tsca1 )t .u )!ng )Kc in >c glic7 k t1c J;( HiA s T12sS l ch k h>- l t15n m( :hi tsca1 c neng k l5n nhiu )Kc in kh#c nhau( HiA s c#c s i2 2 h l c#c s ngu;5n2 thWa m8n c#c t4nh t*#n sau:
h2 i2 > p D v

pCi[Th1V2-V@Sl@( Ga th`c hin

= r h i y 7 Tm* pS (
= sThr >s S @ Tm* p @S (
mI = T hm + is ST hr >s S @ Tm* p @S (

>

N chng ta u ng kim t1a >c 1!ng:

mI y ( 7

NX thc T 2 S l ch k h>- l c%a ch k mE( P ngen ngYa tQn cng th7* kiu giA m0* t15n thX ging nh t1*ng s6 + f?g v fa)in chng ta c\ng th5m thng tin -ho v* )Kc in v k l5n gi# t1$ hm hash c%a )Kc in ( 9.G HH s !" ch k 6*ga3a ?au khi eng s6 + ch k qlgamal2 thX sau m9t s cAi ticn c%a s6 + n; "uQt hin( juan t1<ng nhQt t1*ng s l s6 + ch k ?chn*11 v chunn ch k h?? Thigital ?ignatu17 ?tan a1 S( 9.G.1 S !" ch k Schn&44 PJ; l s6 + ch k thu9c h< c%a qlgamal nhng c nhng t4nh chQt tt h6n s* vi s6 + qlgamal( ?6 + ch k >c ch* ' i Th1I- *+J -ha3 s hK -hng:
@(

Ch<n hai s ngu;5n t - v =2 thWa m8n iu kin =x-V@( N c#c s n; >c ch<n sa* ch* k4ch thc
p = @DF v - = @M (

D(

i`a ch<n -h.n t

f 1 m p

g 1 m p c

)/c l = TP lm iu n; thX c.n -hAi lQ; -h.n t

v th`c hin lnh g f T p @S } - Tm* pS ( [cu nh gl@ thX lk- l0i lnh 5n
m

khi
,(

g @ S( 1 - TN4

i`a ch<n hm hash 3: {2@}

o c th ch<n ?3gV@S(

C#c tham s T-2=2g23S s^ -hJn ) gia c#c ng&i rng h thng( HLnh -h)nh kh'a 3+- v) kh'a cAng c,ng: glic7 t0* 1a s ngvu nhi5n
6 1 m p v

th`c hin lnh:

y g 6 Tm* p S (

C#c tham s cng c9ng l T-2=2g2;23S csn " l kha m/t( T%& ch k: P k l5n )Kc in T72sS2 ' J;:
r g l Tm* p S2 e ? Tm xx r S2 s l + 6eTm* - S(
m {2@}
m

2 thX glic7 t0* 1a s ngvu nhi5n

l 1 -

v hXnh thnh ck-

Th23 -4a ch k: P thnm t1a ch k2 U*) th`c hin c#c )c sau:

r I g s y e Tm* p S2 eI ? T m xx r I S2

N71iO;T-2=2g2;2hSTm2Ts27SSlGfpq2 ncu nh 7El7( Ch 1!ng khi t0* 1a c#c tham s h thng2 vic t0* -h.n t sinh g c th >c "#c $nh 1Qt nhanh )'i vX =x-V@( Nic thnm t1a ch k ng ncu nh ck- Tm2Ts27SS ng l ck- )Kc inV ch kz2 >c t0* 1a )'i glic7( [ghwa l:
r I g s y e g 6e +l y e y e g l y e g l r Tm* p S (

[h chng ta thQ; vic Kng ong nhm c*n )/c = c%a nhm

1p

ch* -hZ- =u# t1Xnh

k c%a s6 + ?ch*n*11 nhanh h6n nhiu s* vi s6 + qlgamal: P chu;n ch k c%a ?ch*n*11 c.n Dx=x )4t2 t1*ng khi chu;n ch k qlgamal c.n Dx-x )4t( Ch k ngn h6n 1Qt nhiu ch* -hZ- giAm s lnh c.n thict hXnh thnh ch k v thnm $nh ch k: t1*ng s6 + ?ch*n*11 tn tT l*g D - l*g D pS 2 csn t1*ng s6 + qlgamal c.n tT l*g, 9.G.2 Chu2n ch k MSS PJ; c\ng l -hi5n )An cAi ticn c%a qlgamal( [ >c "uQt nem @@2 tu; nhi5n n >c chQ- nh/n lm chunn tY @}@D}@F( Hing nh s6 + ch k ?chn*112 chunn ch k h?? c\ng c nhng u im s* vi qlgamal( ?6 + ch k >c mi5u tA nh sau: Ghict l/- tham s h thng: C#c tham s h thng ging nh s6 + ch k ?chn*11( N chunn h?? ch<n hm hash l ?3gV@( C#c tham s c%a h thng l T-2=2g23S "7m s6 + ?chn*11( G0* kha: glic7 t0* 1a s ngvu nhi5n
6 1 p l

p S(

kha m/t v t4nh kha cng c9ng:

y g 6 Tm* p S (

Gham s cng khai c%a glic7 )a* g+m T-2=2g2;23S csn " l tham s m/t( 3Xnh thnh ch k P k l5n )Kc in m {2@}m 2 glic7 t0* s ngvu nhi5n T12sS2 vi
r T g l Tm* p SSTm* - S2 s l @ T ? TmS + 6r STm* - S(
l 1 p

v hXnh thnh n5n ck-

Ghnm t1a ch k P thnm t1a ch k2 U*) rng ck- Tm2T12sSS ch* t4nh t*#n sau

@ s @ Tm* - S2 u@ ? TmS @Tm* - S2 uD r@Tm* - S2

N71iO;T-2=2g2;2hSTm2T12sSSlGfpq2 ncu nh r = T g u y u Tm* pSSTm* -S (

@ D

Chng ta "7m vic kim t1a ch k l h>- l: Pkt + = T g u y u Tm* pSSTm* - S = g ? T m S s

@ D @

Tm* - S

g 6rs

Tm* - S

STm* p STm* - S

+ = T g s

T ? T m S + 6r STm* - S

STm* p STm* - S = g l Tm* p STm* - S = r

[hKng u im2 nhng ch t6ng t` s6 + ch k ?chn*11( 9.G./ Chu2n ch k c.a N1On PA Q&s- /5R1S.95 ?6 + n; 1a &i sau chunn h?? c%a C n5n n >c k thYa v )b sung nhng u vit c%a mXnh( ?6 + chunn ch k Ht?G ,F@(F HLnh -h)nh -ha3 s hK -hng: Ch* - l s ngu;5n t2 k4ch thc tY L cn L@D )4t2 = l s ngu;5n t sa* ch* =x-V@( ? g -V@ c )/c l =2 nghwa l g - @Tm* p S ( HLnh -h)nh kh'a: glic7 ch<n " = l kha m/t2 v glic7 i t4nh kha cng khai: y = g 6 Tm* pS ( C#c tham s T-2=2g2;S l tham s cng khai( Tu; -4Lnh k: glic7 mun k l5n )Kc in C2 thX glic7 th`c hin c#c )c sau: @( i`a ch<n s ngvu nhi5n k(
D( G4nh r = g k Tm* p STm* - S ( ,( G4nh s = T Mk + 6r STm* - S (

Ch k c%a )An tin C l ck- T12sS( Tu; -4Lnh -h23 -4a ch k: U*) mun kim t1a ch k T12sS c t6ng Kng vi )An tin C v c#c tham s m' T-2=2g2;S khng2 thX U*) th`c hin c#c )c t4nh sau:
@( G4nh v + = M - D Tm* - S ( D( G4nh =@ = TT s+STm* - S ( ,( G4nh =D = TT- r S+STm* - S (
= = F( G4nh u = T g @ y D STm* p STm* - S (

L( N U*) kim t1a |ng thKc sau:

N71iO;T-2=2g2;STm2T12sSlGfpq2 ncu ul1( Chng ta "7m hm kim t1a ch k l h>- l )!ng 8; )icn bi sau:
u = T g =@ y = D STm* pSTm* -S l

l T g T 6r +kM S M l T g 6rM
- D

- D

Tm* - S +6 T - r S M - D Tm* - S

STm* p STm* - S =

Tm* - S +k 6rM - D Tm* - S

STm* p STm* - S =

= g k Tm* p STm* - S = r

9.U S !" ch k -4On c sV !WXng c&ng 6**1J-8c (M(@ Chu2n $=SY P9Z1 v) Y666 [1/U/ Ghu/t t*#n qCh?g Tqlli-tic Cu1v7 hig7st ?ignatu17 glg*1ithmS >c tic- nh/n lm chunn g[?y _@ v yqqq @,M,( PKc qCh?g l chunn =uc gia( [ga c\ng t0* s6 + ch k chunn t15n c6 s' qCh?g2 -h.n tic- th7* chng ta "7m "Zt( ?6 + ch k qCh?g Tu; -4Lnh hLnh -h)nh kh'a( @( i`a ch<n &ng c*ng qli-tic q "#c $nh t15n -( ? im t15n &ng c*ng c.n -hAi chia hct ch* s ngu;5n ln n(
D( i`a ch<n im qT-S c )/c l n( ,( Ch<n s ngvu nhi5n

@2nV@(

F( G4nh jl ( L( :ha m/t l 2 kha cng khai l Tq22n2jS( Tu; -4Lnh hLnh -h)nh ch k: glic7 mun k t15n )An tin C ch k c%a mXnh thX glic7 th`c hin c#c )c sau
@( Ch<n s ngvu nhi5n k @2nV@(

D( G4nh klT"@2;@S v 1l"@ Tm* nS [cu nh 1 thX chu;n sang )c ,2 ng>c l0i thX =ua; v )c @( ,( G4nh kV@Tm* nS( F( G4nh slkV@ThTCS 1 Tm* nS( [cu nh s thX chu;n v )c L2 ng>c l0i thX =ua; v )c @( L( Ch k c%a )An tin C l ck- s T12sS( Ch8 !A @S G1*ng chunn g[?y _@ v yqqq @,M, s ong hm 3ash l ?3gV@( DS :hi 1l kct =uA t4nh t*#n s s^ khng -ho thu9c v* kha m/t ( ,S [cu sl thX c.n kim t1a ch k t4nh sV@Tm* nS khng t+n t0i(

Tu; -4Lnh -h23 -4a ch k: U*) mun kim t1a ch k c ng l glic7 8 k t6ng Kng vi )An tin C v kha m' Tq22n2jS l T12sS khng2 U*) th`c hin c#c )c sau: @( [cu nh 1 v s l c#c s ngu;5n t1*ng kh*Ang @2nV@ thX chu;n sang )c D2 ng>c l0i thX kct =uA thnm t1a l sai( D( G4nh lsV@Tm* nS v hTCS( ,( G4nh u@lhTCS Tm* nS v uDl1 Tm* nS( F( G4nh u@uDjlT"2;S v vl" Tm* nS( L( UKc in ng khi v chd khi vl1( 9.U.2 Chu2n ch k s c.a =ga Q\ST /5.1S.2SS1 P nJng ca* neng suQt thict )$ t4nh t*#n v hin 0i ha thu/t t*#n t4nh t*#n l*ga1ith t1*ng t1&ng hu h0n nh!m nJng ca* 9 an t*n c%a ch k t1c c#c kiu tQn cng kh#c nhau( N chunn ch k Ht?G ,F(@VD@ 1a &i nh!m tha; thc ch* Ht?G ,@(@VF( G1*ng chunn n; s ong nhm lnh t15n &ng c*ng qli-tic( Chng ta "7m s6 + ch k >c mi5u tA nh sau: 3Xnh thnh tham s h thng: @( Ch<n - lm m* ul* ch* &ng c*ng qli-tic2 vi - DDLL( D( Ch<n h s a 2 ) ch* &ng c*ng qli-tic q( a v ) thWa m8n:

a ,k Tm* pS2 4 Dk Tm* pS

Ni k
B T5S Fa , Tm* pS 2 B T 5 S @D Tm* p S 2 B T 5 S @D ha; @D B T 5 S Fa , + D4 D
B T5S (

,( H<i m l )/c c%a &ng c*ng qli-tic q( Ch<n s ngu;5n t =2 = l )/c c%a nhm c*n c;clic c%a nhm &ng c*ng qli-t4c q2 v = thWa m8n iu kin:
m = n-2 n 1 2 n @2 D DLF - D DLM(

F( Ch<n T"-2;-S l im kh'i t0*2 sa* ch* thWa m8n: D C v c )/c l =2

nghwa l =lt( L( Ch<n hm )em 3ash l chunn Ht?G ,F(@@VF( 3m n; c .u 1a l vZc t6 i DLM )4t( HLnh -h)nh kh'a ch& s !":

P k )Kc in c%a mXnh2 glic7 ch<n

<0 <-(

lm tham s m/t2 thWa m8n iu kin:

glic7 t4nh kha cng khai l jT"=2;=S2 vi jl (

C#c tham s cng khai l Tq2-2=2j2mS( Tu; -4Lnh k: P k l5n )An tin C2 thX glic7 th`c hin c#c )c sau: @( G4nh gi# t1$ hm hash c%a )An tin C: hElhTCS(
D( GY vZc t6 nh$ -hJn hE ta chu;n v h th/- -hJn l s ngu;5n

( _#c $nh s

7 thWa m8n: e Tm* -S ( [cu nhu 7l thX g#n 7l@(

,( G0* 1a s ngu;5n ngvu nhi5n k2 thWa m8n )Qt |ng thKc: < k < - ( F( G4nh im CT"c2;cS t15n &ng c*ng qli-t4c2 vi Clk v t4nh ticr 6c Tm* - S ( [cu

nh 1l thX =ua; l0i )c ,(

L( G4nh gi# t1$ s T r0 + keSTm* - S ( [cu nhu sl thX =ua; l0i )c ,(

M( Ch k t6ng Kng vi )An tin C l ck- T12sS( Tu; -4Lnh -h23 -4a ch k: U*) mun kim t1a ch k T12sS c t6ng Kng vi )An tin C ha; khng2 `a t15n c#c tham s cng khai2 U*) th`c hin c#c )c sau: @( G4nh gi# t1$ hm hash c%a C l hElhTCS(
D( GY vZc t6 nh$ -hJn hE ta chu;n v h th/- -hJn l s ngu;5n

( _#c $nh s

7 thWa m8n: e Tm* -S ( [cu nhu 7l thX g#n 7l@(

,( G4nh gi# t1$ + e @ Tm* - S ( F( G4nh c#c gi# t1$ =@ s+Tm* - S2 = D r+ Tm* - S ( L( G4nh @ im t15n &ng c*ng C = =@ D + = D E v "#c $nh 3 6c Tm* - S 2 6c l

tung 9 c%a im C( M( Ch k ng khi v chd khi fl1( 9.] Ch k 3X Chau3 nh ngha( Hia* thKc ch k m& l gia* thKc t1a* bi tin gia glic7 v U*)2 kct =uA c%a cu9c t1a bi l U*) nh/n >c ch k tY glic7 k l5n )Kc in m U*) c.n2 nhng glic7 khng )ict 1!ng c ta 8 k( Ch k m& c m9t l*0t Kng ong =uan t1<ng t1*ng th`c tc2 nh ).u c in t2 tin in t( C9t t1*ng c#c s6 + nbi ticng l s6 + ch k m& Chaum( ?6 + n; hXnh thnh t15n c6 s' s6 + ch k f?g( [ >c mi5u tA nh sau: [hng tham s hXnh thnh h ging nh t1*ng h m/t f?g(

@( U*) ch<n s ngvu nhi5n 12 sa* ch* pCi[T12nSl@(

D( U*) g'i ch* glic7 M I = M r e Tm* nS 2 J; l )An tin glic7 k2 glic7 khng

th )ict >c )An tin CE(

,( glic7 k l5n l5n CE v g'i ch* U*): s I = M I 0 = M 0 r e0 Tm* nS = r M 0 Tm* nS (

Pcn J; glic7 c\ng khng th )ict >c gi# t1$ M 0 )'i )An m8 sE >c m8 )'i kha 1( [cu nh glic7 )ict >c M 0 thX c ta u ng )ict >c C )!ng c#ch: T M 0 S e = M Tm* nS (
F( U*) rng thu/t t*#n m' 19ng qucli 7 t4nh r @ v khi -hoc ch k ch*

)An tin C2 )!ng c#ch: s = k @ s I = k @ k M 0 = M 0 Tm* nS ( [h v/; chng ta thQ;2 moc 4ch U*) nh/n >c ch k ng i vi )An tin C( 9.^ Ch k khAng ch1 !W_c c.a Chau3R$n-`C4JCn ?6 + ch k khng chi >c * ChaumV gnt71-7n a 1a nem @( Chng ta s^ thQ; m9t im ;cu c%a ch k l hin t>ng nhJn )An ch k c%a glic72 v -hJn -hi ch k n; )!ng -h6ng -h#- in t m khng h c s` +ng c%a glic7( P t1#nh t1&ng h>- n; thX chng ta rng gia* thKc hWi v t1A l&iz2 tKc l c s` tham gia c%a glic7 "#c minh ch k( [hng c t1&ng h>- "A; 1a l glic7 c th tu;5n ) ch k h>- l l giA m0* v tY chi "#c minh n h*kc th`c hin gia* thKc th7* c#ch ch k khng th "#c minh >c( P ngen chkn tXnh hung n; "8; 1a2 s6 + ch k khng chi >c 8 kct h>- vi gia* thKc tY chi2 th7* gia* thKc n;2 glic7 c th chKng mXnh vi m<i ng&i l ch k l giA m0*2 iu n; +ng nghwa vi vic ncu glic7 khng nh/n tham gia v* gia* thKc tY chi2 l )!ng chKng chKng tW ch k t15n l th/t( ?6 + ch k khng chi >c g+m )a -h.n: thu/t t*#n k2 gia* thKc "#c minh v gia* thKc tY chi( Chng ta "7m s6 + >c mi5u tA nh sau( ?Fnh %h;nh c'c %ham s" ch: s #2(
m ?& + th`c hin t1*ng 1 D 2 nhm c*n H c%a 1 D 2 vi H c )/c ngu;5n t( Ch<n

-lD=@2 = l s ngu;5n t v )i t*#n l*ga1ith t1*ng 1 D l khng giAi >c( Ch<n

m 1 D c )/c l =( glic7 ch<n tham s m/t l a2 vi @ a - @ v t4nh gi# t1$ cng khai

= a Tm* p S (

?Fnh %h;nh ch k!( glic7 mun k l5n )Kc in " G 2 c ta hXnh thnh ch k )!ng kha m/t c%a mXnh: ;l"a Tm* -S( N g'i ch* U*)( H'c minh ch k!(

P "#c minh ch k c%a glic72 U*) th`c hin =ua gia* thKc sau:
m @( U*) ch<n ngvu nhi5n e@ 2 eD 1 D (

e e D( U*) t4nh c = y @ D Tm* p S v g'i c ch* glic7(

,( glic7 t4nh 0 = c a

Tm* - S

Tm* p S v g'i ch* U*)(

F( U*) kim t1a |ng thKc sau2 ncu ng thX U*) +ng ch k c%a glic7:
0 6 e@ eD Tm* p S

Gia: %hc %I ch"i( Hia* thKc tY chi g+m hai l.n th`c hin gia* thKc "#c minh2 v >c mi5u tA nh sau:
m @( U*) ch<n e@ 2 eD 1 -

e e D( U*) t4nh c = y @ D Tm* p S v g'i c ch* glic7(

,( glic7 t4nh 0 = c a

Tm* - S

Tm* p S v g'i ch* U*)(

e e F( U*) "#c minh iu sau c ng khng: 0 6 @ D Tm* p S 2 ncu ng thX U*)

th`c hin )c L(
m L( U*) ch<n f@ 2 f D 1 -

f f M( U*) t4nh C = y @ D Tm* p S v g'i c ch* glic7(

( glic7 t4nh J = C a

Tm* - S

Tm* p S v g'i ch* U*)(

f f ( U*) "#c minh iu sau c ng khng: J 6 @ D Tm* p S ncu ng thX U*)

th`c hin )c ( ( U*) kct lu/n 1!ng ch k ; l giA m0* khi v chd khi:
T 0 eD S f@ T J f D S e@ Tm* p S

Chng ta chKng minh th% toc kim t1a ch k v gia* thKc tY chi l h>- l( Chng ta thQ;:
0 c a Tm* p S T y e@ eD S a Tm* p S y e@a eD a Tm* p S
@ @ @ @

C
a Tm* p S a @ Tm* p S

N
y a 6 Tm* p S y a 6 Tm* p S
@

[5n ta c: 0 6 e e Tm* pS ( [h thc gia* thKc kim t1a l h>- l(

@ D

UJ; gi& chng ta "7m th% t`c tY chi( )c TFS v )c TS2 ncu thWa m8n2 iu n; c nghwa l ch k khng ng2 tKc l: y 6 a Tm* pS ( C nghwa l chng ta c.n chKng tW 1!ng ncu y 6 a Tm* pS thX T0 e S f T J f S e Tm* pS 2 tKc l )c TS c%a th% toc l
D @ D @

h>- l( G1in khai vc t1#i c%a |ng thKc:

T0 eD S f@ Tc a eD S f@ Tm* p S TT y e@ eD S a
@ @

f@

e f Tm* pS
D @

y e@ f@ Tm* p S

G6ng t` ta t1in khai vc -hAi c%a |ng thKc2 chng ta c\ng thu >c
T J f D S e@ y
e@ f@

Tm* p S (
@ D @

N/; T0 e S f T J f S e Tm* p S (
D