后量子加密算法的硬件实现综述

现有的密码体制大多基于RSA、ECC等公钥密码体制,在信息安全系统中实现密钥交换、数字签名和身份认证等,有其独特的优势,其安全性分别依赖于解决整数分解问题和离散对数问题的难度。近年来,随着量子计算机的快速发展,破解上述数学问题的时间大幅减少,这将严重损害数字通信的安全性、保密性和完整性。与此同时,一个新的密码学领域,即后量子密码学应运而生,基于它的加密算法可以对抗量子计算机的攻击,因此成为近年来的热点研究方向。2016年以来,NIST向世界各地的研究者征集候选抗量子密码学方案,并对全部方案进行安全性、成本和性能的评估,最终通过评估的候选方案将被标准化。本文比较了NIST后量子密码学算法征集(第2轮、第3轮)的各个方案,概述目前后量子加密算法的主要实现方法:基于哈希、基于编码、基于格和基于多变量,分析了各自的安全性,签名参数及计算量的特点以及后期的优化方向。PQC算法在硬件实现上的挑战其一是算法规范的数学复杂性,这些规范通常是由密码学家编写的,关注的重点是其安全性而非实现的效率,其二需要存储大型公钥、私钥和内部状态,这可能会导致不能实现真正的轻量级,从而降低硬件实现的效率。本文重点介绍了目前后量子加密算法的硬件实现方式,包括PQC硬件应用程序编程接口的开发,基于HLS的抽象实现和基于FPGA/ASIC平台的硬件实现。PQC方案的硬件化过程中不仅需要算法的高效实现,同时需要抵抗针对硬件结构的侧信道攻击。侧信道攻击可以通过来自目标设备泄露的相关信息来提取密码设备的密钥。本文讨论了后量子加密算法在具体实现和应用中受到侧信道攻击类别和防御对策。     

Failure to diverge in African Great Lakes: The case of Dolicirroplectanum lacustre gen. nov. comb. nov. (Monogenea,Diplectanidae) infecting latid hosts

Speciation of fish in the African Great Lakes has been widely studied. Surprisingly, extensive speciation in parasites was only recently discovered in these biodiversity hotspots, notably in monogeneans (Platyhelminthes) from Lake Tanganyika. Diplectanum is a monogenean genus of which only a single species is known from the Great Lakes: Diplectanum lacustre (Diplectanidae) living on lates perches (Latidae) of Lake Albert. Despite their primary marine origin, latids have diversified in African freshwaters including several Great Lakes. In better-studied marine diplectanid species, incongruence between morphological and genetic differentiation was documented. As freshwater systems provide more opportunities for speciation than the marine realm, we ask whether diplectanids of Lates spp. of the Great Lakes underwent similar diversification as their hosts. Fresh and museum specimens of five African latid species (Lates angustifrons, L. mariae, L. microlepis, L. niloticus, L. stappersii) were examined for the presence of monogenean gill parasites. Monogeneans were characterised morphologically via morphometrics of sclerotised structures and genetically using nuclear and mitochondrial markers. Continuous morphological variation was documented in these parasites. In addition, the genetic distance, based on the COI region, between parasites of geographically isolated host species did not reach the level typically associated with distinct diplectanid species. Therefore, a single species of a newly described genus, Dolicirroplectanum lacustre gen. nov. comb. nov. is suggested to infect latid species in the examined basins. We discuss this parasite’s failure to diverge in the light of the congruence between the rate of molecular evolution in COI and host historical distribution.     

共存阴离子对核酸阻锈剂在模拟混凝土孔溶液中钢筋阻锈作用的影响

将一种含有长度在20～80个碱基的各种引物的混合溶液溶解在核酸缓冲液中作为核酸阻锈剂,通过线性极化和电化学阻抗谱(EIS)两种电化学手段分别研究共存阴离子HCO_3~-和SO_4~(2-)对核酸阻锈剂在模拟混凝土孔溶液中对钢筋氯盐腐蚀的影响。利用X射线光电子能谱(XPS)分析了在有共存阴离子存在的模拟混凝土孔溶液中钢筋电极在核酸阻锈剂作用下表面膜的组成结构。结果表明:核酸阻锈剂具有良好的钢筋防腐蚀效果,共存阴离子HCO_3~-的存在使钢筋的腐蚀速率加快,但核酸的加入能明显减弱钢筋腐蚀倾向,具有和商用阻锈剂(主要成分为磷酸钠)基本相同的阻锈效率;共存阴离子SO_4~(2-)的存在加快了钢筋的腐蚀速率,且SO_4~(2-)的浓度较低时核酸阻锈剂的阻锈效率已经超过了同等条件下的商用阻锈剂。     

免标记DNA电化学传感器测定凝血酶

研制了一种基于介孔二氧化硅负载纳米金和适体DNA的免标记电化学传感器,用于检测凝血酶的含量。实验中先用三甲基氯硅烷(TMCS)封闭介孔二氧化硅(MPS)前驱体外壁硅羟基的活性,煅烧除去模板剂后,再用氨基丙基三乙氧基硅烷(APTS)与孔道内壁硅羟基反应,接枝氨基,最后得到内壁修饰氨基的介孔硅材料(APTS-TMCS-MPS)。金纳米粒子(GNPs)通过与APTS-TMCS-MPS氨基的静电作用力组装到介孔孔道内,然后和巯基修饰的适体DNA通过金硫键相结合,制得免标记探针(DNA/GNPs/APTSTMCS-MPS)。将探针修饰在玻碳电极表面,制得免标记DNA电化学传感器。将该传感器与含有凝血酶的待测液温育反应后,凝血酶和固定在介孔内的适体DNA发生特异性反应,形成位阻较大的适体DNA和凝血酶的复合物,从而增加了介孔孔道内的空间位阻,导致电流响应信号降低。随着凝血酶浓度的增加,孔道内部的位阻也随之增加。根据形成的复合物对电子转移和响应电流的阻碍,可以实现对凝血酶的免标记测定。实验结果表明,APTS-TMCS-MPS介孔孔道内的GNPs,可以提高孔道内电子的传递效率。在优化的实验条件下,该免标记DNA电化学传感器对凝血酶的检测线性范围是1.0×10-8~1.0×10-6 mol·L-1,检测限是7.5×10-9 mol·L-1(3σ)。     

两方量子密钥协商协议的改进

针对Hsueh和Chen的基于最大纠缠态两方量子密钥协商协议存在安全漏洞,即发送方可单方控制共享密钥的问题,通过增加接收方的幺正操作给出了一个改进方案.利用幺正操作来代替对发送方的安全检测,这从根本上满足了量子密钥协商中各参与者都贡献于共享密钥的生成和分配这一基本要求,从而使其抗发送方攻击的安全性依赖于基本物理原理而非检测光子技术.安全分析表明,该方案可有效抵抗外部攻击和参与者攻击.与另一改进方案相比,该方案以更小的代价解决了原协议的漏洞,提高了协议效率.     

基于灰度图像的秘密分享方案

目前像素的扩展问题成为可视秘密分享方案的重要问题。利用布尔运算给出一个可视的秘密分享方案,并且没有像素的扩展,恢复出的秘密图像质量很好。     

Fe^3＋离子修饰的金纳米粒子对DNA的高效吸附

在谷胱甘肽功能化的金纳米粒子表面螯合Fe^3＋离子后,研究了DNA分子在不同p H和盐浓度条件下在粒子表面的吸附和脱附行为。在pH〈4.0的条件下,DNA通过所含的磷酸根基团与粒子表面的Fe^3＋离子产生配位相互作用而吸附到粒子表面,此过程受盐浓度影响不大。当pH〉4.0时,由于溶液中氢氧根离子的竞争作用,使DNA的磷酸根基团不能与Fe^3＋离子配位,此时只能通过静电或氢键作用吸附,但是吸附效率很低。因此,Fe^3＋离子修饰的金纳米粒子只在低p H条件下可以实现对DNA的高效吸附。这种基于配位作用的吸附效率要高于盐桥作用,而且不会受到溶液中盐浓度的影响。     

基于人工鱼群遗传算法的 DNA 编码优化

针对DNA计算中的编码序列设计问题,分析DNA编码序列设计的目标和需要满足的约束条件,从中选择适当的约束条件,给出评估公式,提出人工鱼群遗传算法生成有效的DNA编码序列。经实验结果表明,所述算法比遗传算法及遗传粒子群算法产生的DNA编码序列质量更加稳定可靠。     

基于 DNA 自组装的全错位排列问题模型

针对全错位排列这类NP 完全问题,提出了一种基于DNA 自组装的全错位排列问题计算模型。该模型利用了DNA分子间的自组装能力,在具体操作时只用到凝胶电泳技术,在一定程度上减少了实验误差。     

An efficient certificateless undeniable signature scheme

Certificateless cryptography addresses the private key escrow problem in identity-based systems, while overcoming the costly issues in traditional public key cryptography. Undeniable signature schemes were proposed with the aim of limiting the public verifiability of ordinary digital signatures. The first certificateless undeniable signature scheme was put forth by Duan. The proposed scheme can be considered as the certificateless version of the identity-based undeniable signature scheme which was introduced by Libert and Quisquater. In this paper, we propose a new scheme which is much more efficient comparing to Duan's scheme. Our scheme requires only one pairing evaluation for signature generation and provides more efficient confirmation and disavowal protocols for both the signer and the verifier. We also prove the security of our scheme in the strong security model based on the intractability of some well-known pairing-based assumptions in the random oracle model.