Proxy-signcryption is a variation of an ordinary signcryption scheme and has been used in many applications where the delegation of rights is quite common. In a proxy-signcryption scheme, an original signcrypter needs to delegate his signcryption capability to a proxy signcrypter to signcrypt messages on behalf of the original signcrypter. By combining the functionalities of proxy signature with identity-based signcryption, in this paper, we propose a novel identity-based proxy-signcryption scheme (IBPSC) from lattice assumptions in the random oracle model. Meanwhile, the security requirements of our IBPSC scheme have been analysed, and our scheme can even resist quantum computer attacks. Compared with existing IBPSC schemes, our scheme is more secure and more efficient. To the best of our knowledge, there is still no relevant IBPSC scheme based on lattice, which is an interesting stepping stone in the post-quantum cryptographic communication.

International Journal of Electronic Security and Digital ForensicsJan 1, 20154 citations

Post-Quantum Lightweight Certificateless Hybrid Signcryption Scheme for Time-Series Data Sharing

CHENG Guanjie, SU Taolong, HUANG Junqin, KONG Linghe

The demand for continuous time-series data sharing in Internet of Things (IoT) scenarios has been increasing. Traditional Certificateless Signcryption (CLSC) schemes based on bilinear pairings or elliptic curves offer limited security under quantum computing threats and incur high computational and communication overheads when repeatedly signcrypting multiple data segments. To address these issues, this paper proposes a post-quantum lightweight certificateless hybrid signcryption scheme tailored for time-series data sharing. First, a bidirectional hash chain-driven symmetric key generation and management mechanism is designed to enable rapid key generation for multiple consecutive data segments while ensuring forward and backward security. Subsequently, a lightweight hybrid signcryption scheme with conditional privacy protection is constructed using a module lattice framework. Combined with an offline/online separation that shifts part of the computation ahead of time, the scheme achieves post-quantum security while significantly reducing the burden on end devices and communication links. The scheme is proven to satisfy IND-CCA confidentiality and EUF-CMA unforgeability in a random oracle model. Prototype implementation and evaluation on resource-constrained terminal devices show that, the proposed scheme achieves significant advantages: on average, the end-side overall latency and transmission volume can be reduced to approximately 40% of those of comparable post-quantum schemes. The advantages of this scheme become even more pronounced in long-duration continuous time-series data scenarios. It effectively balances post-quantum security, lightweight design, and scalability, making it well-suited for time-series data sharing applications in next-generation intelligent IoT.

Sep 1, 20260 citations