论文部分内容阅读
Among several post quantum primitives proposed in the past few decades,lattice-based cryptography is considered as the most promising one,due to its underlying rich combinatorial structure,and the worst-case to average-case reductions.The first lattice-based group signature scheme with verifier-local revocation (VLR) is treated as the first quantum-resistant scheme supported member revocation,and was put forward by Langlois et al.This VLR group signature (VLR-GS) has group public key size of O(nmlog N logq),and a signature size of O(tm log N log q log β).Nguyen et al.constructed a simple efficient group signature from lattice,with significant advantages in bit-size of both the group public key and the signature.Based on their work,we present a VLR-GS scheme with group public key size of O(nmlogq) and signature size of O(tmlogq).Our group signature has notable advantages:support of membership revocation,and short in both the public key size and the signature size.