Chng 9

CH K S
9.1 Tng quan v ch k s
Chng ta c th hiu nm na v ch k s in t nh sau: l nhng thng tin i km
vi liu nh!m "#c $nh ch% c%a ng&i g'i n(
Ch k s in t )a* g+m , thnh -h.n: thu/t t*#n t0* 1a kha2 hm t0* ch k v
hm kim t1a ch k(
3m t0* 1a ch k l hm t4nh t*#n ch k t15n c6 s' kha m/t v liu c.n k(
3m kim t1a ch k l hm kim t1a "7m ch k 8 ch* c ng vi kha cng c9ng
khng( :ha n; m<i ng&i c =u;n t1u; c/- ch* n5n m<i ng&i u c th kim t1a
>c ch k(
nh ngha: ?6 + ch k )a* g+m c#c thnh -h.n sau
@( :hng gian )An 1B C(
D( :hng gian ch k ?(
,( :hng gian kha : t0* n5n ch k2 khng gian kha :E kim t1a ch k(
F( Ghu/t t*#n hiu =uA t0* n5n kha H7n: I K K N 2 ' J; : v :E t6ng
Kng vi khng gian kha m/t v kha cng c9ng(
L( Ghu/t t*#n t0* ch k ?ign: S K M (
M( Ghu/t t*#n kim t1a ch k N71iO;:
{ } False True K K M 2 I
(
Pi vi )Qt kR kha t0* ch k K sk v )Qt kR )An tin M m lnh k )Kc in >c
k hiu:
S Tm Sign s
sk

(
Uiu thKc n; >c <c nh sau: sV l ch k c%a )An tin m >c t0* 1a nh& thu/t t*#n
?ign v kha m/t sk(
Pi vi )Qt kR kha m/t c%a ch k K sk 2 t6ng Kng vi kha cng c9ng kim
t1a ch k l
I K pk
2 )Qt kR )An tin M m v ch k S s c.n thWa m8n iu kin sau:

=
if False
if True
Verify
s m pk
2
2
S 2 T
S T
S T
m sk
m sk
Sign s
Sign s

=
U'i vX ti liu c.n k th&ng c chiu i kh# i( C9t )in -h#- k l chia ti liu
1a c#c *0n nhW v sau k l5n tYng *0n v ghZ- l0i( [hng -h6ng -h#- c nh>c
im l ch k ln2 thK hai l k ch/m vX hm k l c#c hm m\2 thK )a l ch k c th
)$ A* l*0n c#c v$ t14 khng Am t4nh ngu;5n v]n c%a ti liu( Ch4nh vX iu m khi k
thX ng&i ta k l5n gi# t1$ hm hash c%a ti liu2 vX gi# t1$ c%a hm hash lun ch* chiu i
"#c $nh( 3m hash s^ >c "7m t1*ng ch6ng sau(
Chc nng ca ch k! s" #i$n %&:
_#c th`c >c ngu+n gc ti liu : Gu; thu9c v* tYng )An tin m c th th5m c#c
thng tin nh/n 0ng2 nh t5n t#c giA2 nhAn th&i gianavv(
G4nh t*n v]n ti liu( NX khi c m9t s` tha; )Qt kR v tXnh ha; c l5n )Kc in thX
g4a t1$ hm hash s^ )$ tha; bi v kct =uA kim t1a )Kc in s^ khng ng(
Chng tY chi )Kc in( NX chd c ch% c%a )Kc in mi c kha m/t k )Kc in(
C'c kh( nng %)n c*ng #"i +,i ch k! #i$n %&:
@( G9i -h0m c th giA m8 m0* ch k t6ng Kng vi ven )An 8 ch<n(
D( G9i -h0m th ch<n )Kc in m t6ng Kng vi ch k 8 ch*(
,( G9i -h0m c th en t19m kha m/t v c th k )Qt kR m9t )Kc in n* n
mun ging nh ch% c%a kha m/t(
F( G9i -h0m c th 8 m0* ng ch% k m9t )Kc in n* (
L( G9i -h0m c th bi kha cng c9ng )'i kha c%a mXnh(
9.2 S !" ch k s #S$
?6 + ch k f?g >c hiOOi7V37llman "uQt v >c f*nal iinn fiv7st2 gi
?hami1 v i7*na1 gl7man th`c hin(
S !" ch k #S$
T%& kh'a:
ju# t1Xnh t0* kha ch* s6 + ch k f?g ging nh =u# t1Xnh hXnh thnh kha c%a h
m/t f?g2 tKc l: glic7 ch<n ck- s ngu;5n t % ln - v =2 vi
p -
2 t4nh [l-=(
Ch<n s ngu;5n 7 thWa m8n
@ SS T 2 T = N e .C/N
( glic7 i "#c $nh s ngu;5n 2 thWa
m8n -h6ng t1Xnh
SS T Tm* @ N e0
( ? l kha m/t c%a glic7(
T%& ch k:
P t0* 1a ch k s c%a )Kc in m
m
N
1
glic7 t0* 1a s
S Tm* S T N m m Sign s
0
0
=
(
Ghnm t1a ch k:
P thnm t1a ch k s c -hAi c%a glic7 k khng thX U*) kim chKng )!ng th% toc
sau:
N71iO;
T[27S
Tm2sSlGfpq2 ncu nh
S Tm* N s m
e

(
fB 1ng chng ta thQ; 1!ng =a t1Xnh t0* ch k v thnm t1a ch k ging vi =u#
t1Xnh m8 v giAi m8 c%a h m/t f?g chd kh#c l =u# t1Xnh t0* ch k glic7 rng kha m/t
csn =u# t1Xnh thnm t1a thX U*) rng kha cng c9ng(
()n *u+n v !, an -&)n c.a s !" ch k s #S$:
[cu s6 & k s th`c hin 6n giAn nh t15n thX t9i -h0m Ttsca1S u ng lYa( N4 o
nh tsca1 c th ch<n ngvu nhi5n
m
N
1 s
v t4nh t*#n 9 ln:
S Tm* N s m
e

(
GhX 1B 1ng =u# t1Xnh thnm t1a Tm2sS l h*n t*n ng( [g*i 1a * t4nh chQt nhJn c%a
hm f?g2 tKc l ncu c hai )Kc in m
@
v m
D
t6ng Kng vi n l D ch k s
@
v s
D
thX
u ng hXnh thnh ch k thK )a s
@
s
D
vi )Kc in thK )a m
@
m
D
:
D @ D @ D @
S T s s m m m m
0 0 0
= = (
P chng l0i s` giA m0* ch k th7* -h6ng -h#- t15n thX m9t -h6ng -h#- 6n giAn
l th5m thng tin -ho v* )Kc in C2 c nghwa l mlCxxy2 ' J; y l Qu hiu nh/n 0ng
v4 o nh ylzt5n t#c giAz(
[g*i 1a kct h>- vi vic k l5n gi# t1$ hm hash c%a )Kc in2 tKc l k l5n gi# t1$:
mlhashTCS(
vX nhng t4nh chQt c%a hm hash s^ chng l0i khA neng giA m0* t15n t1Y "#c suQt 1Qt
nhW2 vX ncu kh c th tXm >c )Kc in m gi# t1$ hash c%a n t1rng vi gi# t1$ hm
hash 8 ch*(
9./ S !" ch k #a01n
?6 + ch k c%a fa)in 1Qt ging s6 + ch k f?g( ?` kh#c nhau gia chng chd
n!m ' =u# t1Xnh thnm t1a ch k( G1*ng s6 + ch k f?g thX tham s 7 l s l{ )'i vX
thWa m8n iu kin gcT72
S TN
Sl@2
S TN
l s ch|n2 csn t1*ng s6 + fa)in 7lD( Chng
ta "7m co th =u# t1Xnh k c%a s6 + fa)in(
S #2 ch k! 3a4in:
T%& kh'a:
ju# t1Xnh t0* kha c%a s6 + ch k fa)in ging nh =u# t1Xnh t0* kha c%a s6 +
ch k f?g( GKc l ch<n hai s ngu;5n t kh#c nhau - v = c 9 ln g.n )!ng nhau v
t4nh [l-=( ? [ l kha m' c%a glic72 csn s -2 = l kha m/t(
T%& ch k:
P t0* ch k ch* )Kc in
m
N
1 m
glic7 t4nh gi# t1$:
S Tm*
D } @
N m s
(
' J; chng ta thQ; t0* n5n ch k s thX m -hAi thu9c jf
[
( glic7 c th ch<n c6
chc th4ch h>- t0* n5n m( Ch c cn ~ s -h.n t c%a nhm
m
N
1
thu9c v jf
[
n5n
glic7 hXnh thnh m l khng kh(
Th23 -4a ch k:
P thnm t1a ch k U*) "7m th% toc sau:
N71iO;
T[S
Tm2sSlGfpq2 ncu nh
S Tm*
D
N s m
(
?6 + ch k fa)in c nhng u im h6n s* vi s6 + f?g( GhK nhQt l giA m0*
ch k l -hKc t0- nh l -hJn t4ch s ngu;5n 1a thYa s ngu;5n t( GhK hai l vic thnm
t1a ch k h*n thnh nhanh h6n v hsan t*n thu/n l>i th`c thi c#c Kng ong(
N chng l0i c#c c#ch tQn cng nh t1*ng f?g thX =u# t1Xnh k c\ng th5m nhKng
thng tin -ho v s ong hm hash(
9.5 S !" ch k 6*ga3a
?6 + ch k qlgamal >c gii thiu nem @L( ?6 + n; thict kc nh 1i5ng ch*
ch k s kh#c vi s6 + f?g nh chung ch* cA h thng m8 cng khai v ch k s(
S #2 ch k! s" 5lgamal:
T%& kh'a:
ju# t1Xnh t0* kha ging nh =a t1Xnh t0* kha c%a h m/t qlgamal2 tKc l glic ch<n
s ngu;5n t - % ln )i t*#n l*ga1ith 1&i 10c t15n
-
l kh giAi2 v ch<n
m
p
1
l
-h.n t ngu;5n th%;2 ch<n
@ < p 6
7
l s ngu;5n lm kha m/t v t4nh kha cng c9ng
;
g
l S Tm* p
7
6
(
T%& ch k:
P k l5n )Kc in m
m
N
1
glic7 t0* 1a s ngvu nhi5n k thWa m8n
@ < p k
v
pCi[Tk2-V@Sl@ v hXnh thnh n5n ch k l ck- T12sS2 ' J;
S( @ STm* T
S2 Tm*
@

p r 6 m k s
p r
7
k

Th23 -4a ch k:
P thnm t1a ch k T12sS U*) "7m kct =uA c%a hm kim t1a:
N71iO;
T

2;g2-S
Tm2T12sSSlGfpq2 ncu nh 1 - v
S Tm* p r y
m s r
7

(
Chng ta "7m s` ng n c%a -h6ng t1Xnh thnm t1a ch k:
S Tm* S Tm*
S T
@
p p r y
m r 6 m k k r 6 s r
7
7 7
= =


(
Chng ta thQ; glic7 hXnh thnh ch k vi kha m/t "
g
v cA s ngu;5n ngvu nhi5n k(
Nic thnm t1a ch k chd )!ng thng tin cng khai(
78 9::
HiA s glic7 ch<n -lFM2 D = 2"
g
l@D( glic7 i t4nh kha cng khai ;
g
S Tm* p y
7
6
7
= lD@
D
m* FMl@,D
glic7 mun k l5n )Kc in ml@2 thX glic7 ch<n s ngvu nhi5n k2 v4 o glic7 ch<n
klD@, TpCi[TD@,2FMSl@S v t4nh D@,
V@
Tm* FMMSlF,@( :hi :
1lD
D@,
m* FMlD
slF,@T@V@D(DS m* FMMlL@
U*) ha; )Qt kR ai c\ng c th thnm t1a >c ch k n; )!ng c#ch:
S FM Tm* @ D
S FM Tm* @ D @,D
@
L@ D

N/; ch k l h>- l(
Ch8ng %a #'nh gi' #9 an %:;n ca s #2 ch k! 5lgamal -ua m9% s" c(nh 4': sau<
C;nh 0;& 1(
P.u ti5n kim t1a ch k thX c.n -hAi kim t1a )Qt |ng thKc 1 -( [cu nh 1 -
thX c khA neng )$ tQn cng2 c#ch n; "uQt )'i Ul7ich7n)ach71( HiA s T12sS l ch k
c%a )Kc in m( G9i -h0m c th gi8 m0* ch k vi m9t )Kc in )Qt kR mE )!ng c#ch
hXnh thnh nh sau:
@(
S @ Tm* I
@


p m m u
D(
S @ Tm* I = p su s
(
,( G4nh 1E2 thWa m8n iu kin
S @ Tm* I p ru r
v
S Tm* I p r r
( Piu n; c th
lm >c nh& #- ong $nh l -h.n G1ung 3*a(
Chng ta thQ; )Kc in mE vi ch k T1E2sES thWa m8n iu kin:
S Tm* S T I
I I I
p r y r y r y
m mu u s r
7
su ru
7
s r
7
=
GQn cng kiu nh thc n; l khng th ncu nh 1 -2 )'i vX t1*ng t1&ng h>- n; gi#
t1$ 1E >c t4nh t*#n th7* )c , Kng ong $nh l -h.n G1ung 3*a th7* m*ul* -T-V
@S(
C<nh 0;& 2(
CAnh )#* n; c\ng hXnh thnh )'i Ul7ich7n)ach71( glic7 c.n -hAi l`a ch<n -h.n t
ngvu nhi5n

tY nhm
m
p
1
( [cu nh tham s n; khng >c l`a ch<n )'i glic7 Tiu
n; l c th2 khi h thng ng&i s ong c m9t tham s m'

v -S2 thX c.n -hAi kim

t1a m9t s l.n 1!ng

l s ngvu nhi5n Tiu n; c th #- ong hm t0* s giA ngvu

nhi5nS(
HiA s 1!ng c#c tham s m'

v - >c l`a ch<n )'i t9i -h0m tsca1( Gham s -

hXnh thnh t15n c6 s' -h6ng -h#- chunn: HiA s -V@l)=2 vi = l s ngu;5n t % ln2
nhng ) c th c thYa s ngu;5n t nhW2 v t4nh t*#n l*ga1ithm t1*ng nhm )/c ) khng
khS(
tsca1 hXnh thnh tham s

th7* c#ch sau:

S Tm* p
%
=
2
Ni
c- =
v c )(
Chng ta )ict 1!ng vic t4nh t*#n l*ga1ith 1&i 10c c%a kha m' ;
g
l )i t*#n kh( Ghc
nhng t4nh t*#n l*ga1ith c%a 9 ln
-
7
y th7* c6 s
-
khng t0* n5n m9t s` kh kh*en
n*( i*ga1ith 1&i 10c n; )!ng
S Tm*4 6 =
7

2 c nghwa thWa m8n +ng thKc sau:

S Tm* S T p y
= - -
7
=
:hi t4nh >c gi# t1$ thX tsca1 c th giA m0* ch k c%a glic7 )!ng c#c lnh sau
J;:
S( @ STm* T
2

=
p c-= m % s
c- r
Chng ta "7m vic thnm t1a ch k:
S Tm* S T
S T
p y r y
m c-= m c-= c-= m % c-
7
s r
7


fB 1ng chng ta thQ; ck- T12sS l ch k c%a )Kc in m2 nhng vic t0* thnh ch k
n; khng c s` tham gia c%a kha m/t "
g
Tm c s` tham gia c%a s "
g
Tm* )SS(
Ch 1!ng t1*ng =u# t1Xnh hXnh thnh ch k giA m0* thX s = l c s c%a 1( hvn
5n c#ch tQn cng c%a Ul7ich7n)ach71 c th ngen chkn ncu nh t1*ng lc kim t1a U*)
kim t1a iu kin = khng l c s c%a 1 TgiA s 1!ng =u# t1Xnh l`a ch*n - thX = l tham
s m'S(
C<nh 0;& /(
G1*ng cAnh )#* n; thX li5n =uan cn chiu i c%a tham s k( G0* 1a ch k th7* s6
+ qlgamal l thu/t t*#n ngJu nhi5n )'i vX tham s k >c hXnh thnh ngvu nhi5n(
glic7 khng )a* gi& rng kha k c#c )Kc in kh#c nhau l c th&i gian sng
ngn( [cu nh tham s k s ong t1' l0i i vi ch k c%a hai )Kc in m
@
v m
D
2 m
hai )Kc in thWa m8n
S @ Tm*
D @
p m m
2 thX tY -h6ng t1Xnh t4nh s c%a s6 + ch k
chng ta c:
S @ Tm* S T
D @ D @
p m m s s l
(
U'i vX
S @ Tm*
@

p l
t+n t0i2 v tY )Qt |ng thKc
S @ Tm*
D @
p m m
vn cn:
S @ STm* }T S T
D @ D @
@

p m m s s l 2
C nghwa
@
l )$ l9( [hng =uan t1<ng nhQt l kha m/t glic7 "
g
c th t4nh t*#n tY
cng thKc hXnh thnh s2 v su; 1a "
g
th7* cng thKc:
S @ Tm* } S T
@ @
p r ls m 6
7
(
Piu n; ch* chng ta thQ; chd >c s ong tham s k m9t l.n u; nhQt(
=g>n ch?n -@n cAng g1< 3%& 6B1s-Cn-1a* D&4gC4E
PJ; l c#ch tQn cng `a v* )Kc in khng )a* g+m thng tin -ho nh/n 0ng(
Chng ta tXm hiu m9t s c#ch hXnh thnh )Kc in v ch k giA m0*(
C;ch -hF nh@-( HiA s u v v l c#c s ngu;5n )Qt kR2 nhW h6n -V@ v thWa m8n iu
kin pCi[Tv2 -V@Sl@( Chng ta h*n thnh m9t s lnh sau:
S @ Tm*
S @ Tm*
S Tm*
@
@

p ru+ m
p r+ s
p y r
+
7
u

Chng ta "7m Tm2T12sSS s^ l ch k ng nh glic7 th`c hin2 )!ng c#ch kim t1a
-h6ng t1Xnh sau:
@ @
S T



r+ +
7
u r
7
r+ r
7
s r
y y r y r y
@ @
S T S T

r+ +
7
r+ u r
7
y y
r
7
ru+ r
7
y y

ru+

S Tm* p
m

C;ch -hF ha1( tsca1 )t .u )!ng )Kc in >c glic7 k t1c J;( HiA s T12sS l
ch k h>- l t15n m( :hi tsca1 c neng k l5n nhiu )Kc in kh#c nhau( HiA s c#c
s i2 2 h l c#c s ngu;5n2 thWa m8n
D 2 2 p > i h
v pCi[Th1V2-V@Sl@( Ga th`c hin
c#c t4nh t*#n sau:
S Tm* p y r
>
7
i h
= (
S @ Tm* S T
@
=

p >s hr s
(
S @ Tm* S ST T I
@
+ =

p >s hr is hm m
(
N chng ta u ng kim t1a >c 1!ng:
I m
7
y

(
NX thc T
2
S l ch k h>- l c%a ch k mE(
P ngen ngYa tQn cng th7* kiu giA m0* t15n thX ging nh t1*ng s6 + f?g v
fa)in chng ta c\ng th5m thng tin -ho v* )Kc in v k l5n gi# t1$ hm hash c%a )Kc
in (
9.G HH s !" ch k 6*ga3a
?au khi eng s6 + ch k qlgamal2 thX sau m9t s cAi ticn c%a s6 + n; "uQt
hin( juan t1<ng nhQt t1*ng s l s6 + ch k ?chn*11 v chunn ch k h?? Thigital
?ignatu17 ?tana1S(
9.G.1 S !" ch k Schn&44
PJ; l s6 + ch k thu9c h< c%a qlgamal nhng c nhng t4nh chQt tt h6n s* vi s6
+ qlgamal(
?6 + ch k >c ch* ' i
Th1I- *+J -ha3 s hK -hng:
@( Ch<n hai s ngu;5n t - v =2 thWa m8n iu kin =x-V@( N c#c s n; >c
ch<n sa* ch* k4ch thc
@DF = p
v
@M = -
(
D( i`a ch<n -h.n t
m
p
1 g
c )/c l = TP lm iu n; thX c.n -hAi lQ; -h.n t
m
p
1 f
v th`c hin lnh
S Tm*
} S @ T
p f g
- p

( [cu nh gl@ thX lk- l0i lnh 5n

khi
@ g
S(
,( i`a ch<n hm hash 3:
{ }
-
1
m
@ 2
TN4 o c th ch<n ?3gV@S(
C#c tham s T-2=2g23S s^ -hJn ) gia c#c ng&i rng h thng(
HLnh -h)nh kh'a 3+- v) kh'a cAng c,ng:
glic7 t0* 1a s ngvu nhi5n
m
p
1 6
v th`c hin lnh:
S Tm* p g y
6

(
C#c tham s cng c9ng l T-2=2g2;23S csn " l kha m/t(
T%& ch k:
P k l5n )Kc in
{ }
m
@ 2 m 2 thX glic7 t0* 1a s ngvu nhi5n -
1 l
v hXnh thnh ck-
T72sS2 ' J;:
S( Tm*
S2 xx T
S2 Tm*
- 6e l s
r m ? e
p g r
l
+

Th23 -4a ch k:
P thnm t1a ch k2 U*) th`c hin c#c )c sau:
S2 I xx T I
S2 Tm* I
r m ? e
p y g r
e s

N71iO;
T-2=2g2;2hS
Tm2Ts27SSlGfpq2 ncu nh 7El7(
Ch 1!ng khi t0* 1a c#c tham s h thng2 vic t0* -h.n t sinh g c th >c "#c
$nh 1Qt nhanh )'i vX =x-V@(
Nic thnm t1a ch k ng ncu nh ck- Tm2Ts27SS ng l ck- )Kc inV ch kz2
>c t0* 1a )'i glic7( [ghwa l:
S Tm* I p r g y g y y g y g r
l e l e e l 6e e s

+
(
[h chng ta thQ; vic Kng ong nhm c*n )/c = c%a nhm p
1
ch* -hZ- =u# t1Xnh
k c%a s6 + ?ch*n*11 nhanh h6n nhiu s* vi s6 + qlgamal: P chu;n ch k c%a
?ch*n*11 c.n Dx=x )4t2 t1*ng khi chu;n ch k qlgamal c.n Dx-x )4t( Ch k ngn
h6n 1Qt nhiu ch* -hZ- giAm s lnh c.n thict hXnh thnh ch k v thnm $nh ch k:
t1*ng s6 + ?ch*n*11 tn tT S l*g l*g
D
D
p - 2 csn t1*ng s6 + qlgamal c.n tT
p
,
l*g
S(
9.G.2 Chu2n ch k MSS
PJ; c\ng l -hi5n )An cAi ticn c%a qlgamal( [ >c "uQt nem @@2 tu; nhi5n n
>c chQ- nh/n lm chunn tY @}@D}@F( Hing nh s6 + ch k ?chn*112 chunn ch
k h?? c\ng c nhng u im s* vi qlgamal(
?6 + ch k >c mi5u tA nh sau:
Ghict l/- tham s h thng:
C#c tham s h thng ging nh s6 + ch k ?chn*11( N chunn h?? ch<n hm hash
l ?3gV@( C#c tham s c%a h thng l T-2=2g23S "7m s6 + ?chn*11(
G0* kha:
glic7 t0* 1a s ngvu nhi5n p
1 6
l kha m/t v t4nh kha cng c9ng:
S Tm* p g y
6

(
Gham s cng khai c%a glic7 )a* g+m T-2=2g2;23S csn " l tham s m/t(
3Xnh thnh ch k
P k l5n )Kc in m
{ }
m
@ 2 2 glic7 t0* s ngvu nhi5n p
1 l
v hXnh thnh n5n ck-
T12sS2 vi
S( STm* S T T
S2 SSTm* Tm* T
@
- 6r m ? l s
- p g r
l
+

Ghnm t1a ch k
P thnm t1a ch k2 U*) rng ck- Tm2T12sSS ch* t4nh t*#n sau
S2 Tm*
S2 Tm* S T
S2 Tm*
D
@
@
- r@ u
- @ m ? u
- s @

N71iO;T-2=2g2;2hSTm2T12sSSlGfpq2 ncu nh S SSTm* Tm* T
D @
- p y g r
u u
= (
Chng ta "7m vic kim t1a ch k l h>- l:
Pkt S STm* STm* S SSTm* Tm* T
S Tm* S Tm* S T
@ @
D @
- p g g - p y g +
- 6rs - s m ? u u

= =
r - p g - p g +
l - 6r m ? s
= = =
+

S STm* Tm* S STm* STm* T

S STm* S T T
@
[hKng u im2 nhng ch t6ng t` s6 + ch k ?chn*11(
9.G./ Chu2n ch k c.a N1On PA Q&s- /5R1S.95
?6 + n; 1a &i sau chunn h?? c%a C n5n n >c k thYa v )b sung nhng u
vit c%a mXnh(
?6 + chunn ch k Ht?G ,F@(F
HLnh -h)nh -ha3 s hK -hng:
Ch* - l s ngu;5n t2 k4ch thc tY L cn L@D )4t2 = l s ngu;5n t sa* ch* =x-V@(
? g -V@ c )/c l =2 nghwa l
S Tm* @ p g
-

(
HLnh -h)nh kh'a:
glic7 ch<n " = l kha m/t2 v glic7 i t4nh kha cng khai:
S Tm* p g y
6
=
( C#c
tham s T-2=2g2;S l tham s cng khai(
Tu; -4Lnh k:
glic7 mun k l5n )Kc in C2 thX glic7 th`c hin c#c )c sau:
@( i`a ch<n s ngvu nhi5n k(
D( G4nh
S STm* Tm* - p g r
k
=
(
,( G4nh
S STm* T - 6r Mk s + =
(
Ch k c%a )An tin C l ck- T12sS(
Tu; -4Lnh -h23 -4a ch k:
U*) mun kim t1a ch k T12sS c t6ng Kng vi )An tin C v c#c tham s m'
T-2=2g2;S khng2 thX U*) th`c hin c#c )c t4nh sau:
@( G4nh v
S Tm*
D
- M +
-
=
(
D( G4nh
S STm* TT
@
- s+ = =
(
,( G4nh
S STm* S TT
D
- + r - = =
(
F( G4nh S STm* STm* T
D @
- p y g u
= =
= (
L( N U*) kim t1a |ng thKc sau:
N71iO;
T-2=2g2;S
Tm2T12sSlGfpq2 ncu ul1(
Chng ta "7m hm kim t1a ch k l h>- l )!ng 8; )icn bi sau:
S STm* STm* T
D @
- p y g u
= =
= l
l =

+ +
S STm* STm* T
S Tm* S T S Tm* S T
D D
- p g
- M r - 6 - M kM 6r
- -
l =

+
S STm* STm* T
S Tm* S Tm*
D D
- p g
- 6rM k - 6rM
- -
r - p g
k
= = S STm* Tm*
9.U S !" ch k -4On c sV !WXng c&ng 6**1J-8c
9.U.1 Chu2n $=SY P9Z1 v) Y666 [1/U/
Ghu/t t*#n qCh?g Tqlli-tic Cu1v7 hig7st ?ignatu17 glg*1ithmS >c tic- nh/n lm
chunn g[?y _@ v yqqq @,M,( PKc qCh?g l chunn =uc gia( [ga c\ng t0* s6
+ ch k chunn t15n c6 s' qCh?g2 -h.n tic- th7* chng ta "7m "Zt(
?6 + ch k qCh?g
Tu; -4Lnh hLnh -h)nh kh'a(
@( i`a ch<n &ng c*ng qli-tic q "#c $nh t15n
-
( ? im t15n &ng c*ng c.n
-hAi chia hct ch* s ngu;5n ln n(
D( i`a ch<n im qT
-
S c )/c l n(
,( Ch<n s ngvu nhi5n @2nV@(
F( G4nh jl(
L( :ha m/t l 2 kha cng khai l Tq22n2jS(
Tu; -4Lnh hLnh -h)nh ch k:
glic7 mun k t15n )An tin C ch k c%a mXnh thX glic7 th`c hin c#c )c sau
@( Ch<n s ngvu nhi5n k@2nV@(
D( G4nh klT"
@
2;
@
S v 1l"
@
Tm* nS
[cu nh 1 thX chu;n sang )c ,2 ng>c l0i thX =ua; v )c @(
,( G4nh k
V@
Tm* nS(
F( G4nh slk
V@
ThTCS1 Tm* nS(
[cu nh s thX chu;n v )c L2 ng>c l0i thX =ua; v )c @(
L( Ch k c%a )An tin C l ck- s T12sS(
Ch8 !A
@S G1*ng chunn g[?y _@ v yqqq @,M, s ong hm 3ash l ?3gV@(
DS :hi 1l kct =uA t4nh t*#n s s^ khng -ho thu9c v* kha m/t (
,S [cu sl thX c.n kim t1a ch k t4nh s
V@
Tm* nS khng t+n t0i(
Tu; -4Lnh -h23 -4a ch k:
U*) mun kim t1a ch k c ng l glic7 8 k t6ng Kng vi )An tin C v kha
m' Tq22n2jS l T12sS khng2 U*) th`c hin c#c )c sau:
@( [cu nh 1 v s l c#c s ngu;5n t1*ng kh*Ang @2nV@ thX chu;n sang )c D2
ng>c l0i thX kct =uA thnm t1a l sai(
D( G4nh ls
V@
Tm* nS v hTCS(
,( G4nh u
@
lhTCS Tm* nS v u
D
l1 Tm* nS(
F( G4nh u
@
u
D
jlT"

2;

S v vl"

Tm* nS(
L( UKc in ng khi v chd khi vl1(
9.U.2 Chu2n ch k s c.a =ga Q\ST /5.1S.2SS1
P nJng ca* neng suQt thict )$ t4nh t*#n v hin 0i ha thu/t t*#n t4nh t*#n l*ga1ith
t1*ng t1&ng hu h0n nh!m nJng ca* 9 an t*n c%a ch k t1c c#c kiu tQn cng kh#c
nhau( N chunn ch k Ht?G ,F(@VD@ 1a &i nh!m tha; thc ch* Ht?G ,@(@VF(
G1*ng chunn n; s ong nhm lnh t15n &ng c*ng qli-tic( Chng ta "7m s6 +
ch k >c mi5u tA nh sau:
3Xnh thnh tham s h thng:
@( Ch<n - lm m*ul* ch* &ng c*ng qli-tic2 vi - D
DLL
(
D( Ch<n h s a 2 ) ch* &ng c*ng qli-tic q( a v ) thWa m8n:

S Tm* D
S2 Tm* ,
p k 4
p k a
Ni
S Tm*
S T @D
S T
p
5 B
5 B
k

2 S Tm*
D F
F
@D S T
D ,
,
p
4 a
a
5 B
+
2
@D S T 5 B
ha;
S T 5 B
(
,( H<i m l )/c c%a &ng c*ng qli-tic q( Ch<n s ngu;5n t =2 = l )/c c%a
nhm c*n c;clic c%a nhm &ng c*ng qli-t4c q2 v = thWa m8n iu kin:
( D D
2 @ 2 2
DLM DLF

=
-
n 1 n n- m
F( Ch<n T"
-
2;
-
S l im kh'i t0*2 sa* ch* thWa m8n: C D v c )/c l =2
nghwa l =lt(
L( Ch<n hm )em 3ash l chunn Ht?G ,F(@@VF( 3m n; c .u 1a l vZc t6
i DLM )4t(
HLnh -h)nh kh'a ch& s !":
P k )Kc in c%a mXnh2 glic7 ch<n lm tham s m/t2 thWa m8n iu kin:
- 0 < <
( glic7 t4nh kha cng khai l jT"
=
2;
=
S2 vi jl(
C#c tham s cng khai l Tq2-2=2j2mS(
Tu; -4Lnh k:
P k l5n )An tin C2 thX glic7 th`c hin c#c )c sau:
@( G4nh gi# t1$ hm hash c%a )An tin C: hElhTCS(
D( GY vZc t6 nh$ -hJn hE ta chu;n v h th/- -hJn l s ngu;5n

( _#c $nh s
7 thWa m8n:
S Tm*- e
( [cu nhu 7l thX g#n 7l@(
,( G0* 1a s ngu;5n ngvu nhi5n k2 thWa m8n )Qt |ng thKc:
- k < <
(
F( G4nh im CT"
c
2;
c
S t15n &ng c*ng qli-t4c2 vi Clk v t4nh tic-
S Tm*- 6 r
c

( [cu nh 1l thX =ua; l0i )c ,(

L( G4nh gi# t1$
S STm* T - ke r0 s +
( [cu nhu sl thX =ua; l0i )c ,(
M( Ch k t6ng Kng vi )An tin C l ck- T12sS(
Tu; -4Lnh -h23 -4a ch k:
U*) mun kim t1a ch k T12sS c t6ng Kng vi )An tin C ha; khng2 `a t15n c#c
tham s cng khai2 U*) th`c hin c#c )c sau:
@( G4nh gi# t1$ hm hash c%a C l hElhTCS(
D( GY vZc t6 nh$ -hJn hE ta chu;n v h th/- -hJn l s ngu;5n

( _#c $nh s
7 thWa m8n:
S Tm*- e
( [cu nhu 7l thX g#n 7l@(
,( G4nh gi# t1$
S Tm*
@
- e +

(
F( G4nh c#c gi# t1$
S Tm* S2 Tm*
D @
- r+ = - s+ =
(
L( G4nh @ im t15n &ng c*ng
E = D = C
D @
+ =
v "#c $nh
S Tm*- 6 3
c

2 c
6
l
tung 9 c%a im C(
M( Ch k ng khi v chd khi fl1(
9.] Ch k 3X Chau3
nh ngha( Hia* thKc ch k m& l gia* thKc t1a* bi tin gia glic7 v U*)2 kct =uA
c%a cu9c t1a bi l U*) nh/n >c ch k tY glic7 k l5n )Kc in m U*) c.n2 nhng
glic7 khng )ict 1!ng c ta 8 k(
Ch k m& c m9t l*0t Kng ong =uan t1<ng t1*ng th`c tc2 nh ).u c in t2 tin
in t( C9t t1*ng c#c s6 + nbi ticng l s6 + ch k m& Chaum( ?6 + n; hXnh thnh
t15n c6 s' s6 + ch k f?g( [ >c mi5u tA nh sau:
[hng tham s hXnh thnh h ging nh t1*ng h m/t f?g(
@( U*) ch<n s ngvu nhi5n 12 sa* ch* pCi[T12nSl@(
D( U*) g'i ch* glic7
S Tm* I n r M M
e
=
2 J; l )An tin glic7 k2 glic7 khng
th )ict >c )An tin CE(
,( glic7 k l5n l5n CE v g'i ch* U*):
S Tm* S Tm* I I n M r n r M M s
0 e0 0 0
= = =
(
Pcn J; glic7 c\ng khng th )ict >c gi# t1$
0
M )'i )An m8 sE >c m8 )'i
kha 1( [cu nh glic7 )ict >c
0
M thX c ta u ng )ict >c C )!ng c#ch:
S Tm* S T n M M
e 0
=
(
F( U*) rng thu/t t*#n m' 19ng qucli7 t4nh
@
r v khi -hoc ch k ch* )An
tin C2 )!ng c#ch:
S Tm* I
@ @
n M M k k s k s
0 0
= = =

(
[h v/; chng ta thQ;2 moc 4ch U*) nh/n >c ch k ng i vi )An tin C(
( Ch k khAng ch1 !W^c c.a Chau3R$n-_C4JCn
?6 + ch k khng chi >c * ChaumV gnt71-7n a 1a nem @( Chng ta s^
thQ; m9t im ;cu c%a ch k l hin t>ng nhJn )An ch k c%a glic72 v -hJn -hi ch
k n; )!ng -h6ng -h#- in t m khng h c s` +ng c%a glic7( P t1#nh t1&ng
h>- n; thX chng ta rng gia* thKc hWi v t1A l&iz2 tKc l c s` tham gia c%a glic7
"#c minh ch k( [hng c t1&ng h>- "A; 1a l glic7 c th tu;5n ) ch k h>- l l
giA m0* v tY chi "#c minh n h*kc th`c hin gia* thKc th7* c#ch ch k khng th
"#c minh >c( P ngen chkn tXnh hung n; "8; 1a2 s6 + ch k khng chi >c 8
kct h>- vi gia* thKc tY chi2 th7* gia* thKc n;2 glic7 c th chKng mXnh vi m<i ng&i
l ch k l giA m0*2 iu n; +ng nghwa vi vic ncu glic7 khng nh/n tham gia v*
gia* thKc tY chi2 l )!ng chKng chKng tW ch k t15n l th/t(
?6 + ch k khng chi >c g+m )a -h.n: thu/t t*#n k2 gia* thKc "#c minh v
gia* thKc tY chi( Chng ta "7m s6 + >c mi5u tA nh sau(
?Fnh %h;nh c'c %ham s" ch: s #2(
?& + th`c hin t1*ng
D
1
2 nhm c*n H c%a
m
D
1
2 vi H c )/c ngu;5n t( Ch<n
-lD=@2 = l s ngu;5n t v )i t*#n l*ga1ith t1*ng
D
1
l khng giAi >c( Ch<n
m
D
1
c )/c l =( glic7 ch<n tham s m/t l a2 vi
@ @ - a
v t4nh gi# t1$ cng khai
S Tm* p
a
=
(
?Fnh %h;nh ch k!(
glic7 mun k l5n )Kc in " G 2 c ta hXnh thnh ch k )!ng kha m/t c%a mXnh:
;l"
a
Tm* -S( N g'i ch* U*)(
H'c minh ch k!(
P "#c minh ch k c%a glic72 U*) th`c hin =ua gia* thKc sau:
@( U*) ch<n ngvu nhi5n
m
D @
2
D
1 e e
(
D( U*) t4nh S Tm*
D @
p y c
e e
= v g'i c ch* glic7(
,( glic7 t4nh S Tm*
S Tm*
@
p c 0
- a

= v g'i ch* U*)(

F( U*) kim t1a |ng thKc sau2 ncu ng thX U*) +ng ch k c%a glic7:
S Tm*
D @
p 6 0
e e

Gia: %hc %I ch"i(
Hia* thKc tY chi g+m hai l.n th`c hin gia* thKc "#c minh2 v >c mi5u tA nh sau:
@( U*) ch<n
m
D @
2
-
1 e e
D( U*) t4nh S Tm*
D @
p y c
e e
= v g'i c ch* glic7(
,( glic7 t4nh S Tm*
S Tm*
@
p c 0
- a

= v g'i ch* U*)(

F( U*) "#c minh iu sau c ng khng: S Tm*
D @
p 6 0
e e
2 ncu ng thX U*)
th`c hin )c L(
L( U*) ch<n
m
D @
2
-
1 f f
M( U*) t4nh S Tm*
D @
p y C
f f
= v g'i c ch* glic7(
( glic7 t4nh S Tm*
S Tm*
@
p C J
- a

= v g'i ch* U*)(

( U*) "#c minh iu sau c ng khng: S Tm*
D @
p 6 J
f f
ncu ng thX U*)
th`c hin )c (
( U*) kct lu/n 1!ng ch k ; l giA m0* khi v chd khi:
S Tm* S T S T
@ D @ D
p J 0
e f f e

Chng ta chKng minh th% toc kim t1a ch k v gia* thKc tY chi l h>- l(
Chng ta thQ;:
S Tm*
S Tm* S T
S Tm*
@
D
@
@
@
D @
@
p y
p y
p c 0
a e a e
a e e
a

C
S Tm* S Tm*
@
p p
a a


N
S Tm* S Tm*
@
p 6 y p a y
a 6


[5n ta c: S Tm*
D @
p 6 0
e e
( [h thc gia* thKc kim t1a l h>- l(
UJ; gi& chng ta "7m th% t`c tY chi( )c TFS v )c TS2 ncu thWa m8n2 iu n;
c nghwa l ch k khng ng2 tKc l:
S Tm* p 6 y
a

( C nghwa l chng ta c.n chKng tW

1!ng ncu
S Tm* p 6 y
a

thX S Tm* S T S T
@ D @ D
p J 0
e f f e
2 tKc l )c TS c%a th% toc l h>-
l(
G1in khai vc t1#i c%a |ng thKc:
S Tm*
S Tm* S TT
S Tm* S T S T
@ @
@ D @
@
D @
@ D
@
@ D
p y
p y
p c 0
f e
f e f a e e
f e a f e

G6ng t` ta t1in khai vc -hAi c%a |ng thKc2 chng ta c\ng thu >c
S Tm* S T
@
@
@
D
p y J
f
e
e f

(
N/; S Tm* S T S T
@ D @ D
p J 0
e f f e
(