With the rapid expansion of consumer electronics and the Internet of Things (IoT) ecosystem, ensuring secure communication in resource-constrained edge devices has become a critical challenge, especially under the threat of quantum attacks. Although lattice-based cryptographic schemes provide post-quantum security, they often suffer from large key storage and high computational overhead, limiting their applicability in edge environments. To address these challenges, we propose an identity-based linkable ring signcryption scheme constructed on the post quantum Lattice cryptography, tailored for edge-enabled IoT systems. The scheme employs a trapdoor generation algorithm to establish the master keys, utilizes compact Gaussian sampling to derive private keys for ring members, and integrates rejection sampling to generate user signatures with strong anonymity. Furthermore, a key encapsulation mechanism ensures identity protection during encryption. Security analysis under the Random Oracle Model (ROM) demonstrates the scheme's resistance to forgery and its linkability property. Performance evaluation shows that the proposed approach achieves smaller public keys, reduced encryption/decryption costs, and enhanced efficiency, making it well-suited for lightweight IoT and consumer electronics applications in the post-quantum era.
With the rapid expansion of consumer electronics and the Internet of Things (IoT) ecosystem, ensuring secure communication in resource-constrained edge devices has become a critical challenge, especially under the threat of quantum attacks. Although lattice-based cryptographic schemes provide post-quantum security, they often suffer from large key storage and high computational overhead, limiting their applicability in edge environments. To address these challenges, we propose an identity-based linkable ring signcryption scheme constructed on the post quantum Lattice cryptography, tailored for edge-enabled IoT systems. The scheme employs a trapdoor generation algorithm to establish the master keys, utilizes compact Gaussian sampling to derive private keys for ring members, and integrates rejection sampling to generate user signatures with strong anonymity. Furthermore, a key encapsulation mechanism ensures identity protection during encryption. Security analysis under the Random Oracle Model (ROM) demonstrates the scheme's resistance to forgery and its linkability property. Performance evaluation shows that the proposed approach achieves smaller public keys, reduced encryption/decryption costs, and enhanced efficiency, making it well-suited for lightweight IoT and consumer electronics applications in the post-quantum era.
The Edge-computing era presents opportunities for the rapid development of the Internet of Things (IoT), where identity authentication is fundamental to ensuring IoT security. However, under post-quantum attacks, traditional identity authentication schemes that rely on signcryption to generate node keys face challenges due to the high number of IoT nodes. These schemes consume significant resources, making it difficult to meet the low-cost requirements of IoT. Against the backdrop of the rapid development of new media and the increasingly growing security demands for resource-constrained consumer electronic edge devices, a lightweight group signcryption authentication scheme based on lattice cryptography is proposed. During the key generation phase, an improved trapdoor diagonal matrix is designed, optimizing the preimage sampling algorithm required for key generation and reducing the total time needed to generate multiple keys. In the identity authentication phase, based on the leftover hash lemma and the properties of signcryption, the scheme allows for simultaneous signing and encryption of messages in a single logical step. A low-interaction protocol combining dot products and hash operations is proposed, enabling group leaders to perform access authentication on behalf of group members. Simulation results show that the scheme reduces the number of interactions required for IoT device access, lowers computational costs during identity authentication, and reduces the total cost of signcryption and un-signcryption by at least 7% compared to existing schemes. Additionally, it is demonstrated that this scheme can resist post-quantum attacks in IoT environments.
The rapid expansion of the Internet of Things (IoT) has led to an unprecedented scale of data exchange across heterogeneous and resource-constrained devices. Ensuring confidentiality and secure key management in such environments is challenging. Traditional public-key infrastructures require heavy certificate-handling overhead. Identity-Based Encryption (IBE) offers a lightweight alternative by deriving public keys directly from device identities, making it attractive for IoT deployments. However, IoT devices are highly vulnerable to side-channel and key-extraction attacks, motivating the need for Forward-Secure IBE(FS-IBE), where the compromise of a current secret key does not threaten past communications. Existing FS-IBE constructions based on classical hardness assumptions are not secure in the era of post-quantum, while the lattice-based (LWE-based) forward-secure scheme suffer from large key and ciphertext sizes, limiting their suitability for constrained IoT systems. Here, we propose a new lattice-based fs-IBE scheme in the ring setting, relying on the RLWE assumption to achieve post-quantum security and significant efficiency gains. Our design uses trapdoor delegation with a minimal-cover mechanism over a binary tree. It results in compact public parameters and efficient per-epoch key updates. Compared to prior LWE-based constructions, our scheme reduces public key, secret key, and ciphertext sizes, and thus, making it better suited for practical IoT environments.
Although the current lattice-based ring signcryption scheme resists quantum attacks,it has large key storage and high encryption/decryption time.The linkable lattice ring signcryption scheme not only can protect signer anonymity,but also can determine whether two signatures are generated by the same signer.Thus,based on the compact Gaussian sampling algorithm and rejection sampling technique,the identity-based linkable ring signcryption scheme is constructed on the NTRU lattice.Firstly,the system master key is generated using the trapdoor generation algorithm on the NTRU lattice.Then private keys of ring members are obtained based on the compact Gaussian sampling algorithm.Finally,the user signature is generated using rejection sampling,and the key encapsulation mechanism encrypts the signature.Security proof in the random oracle model (ROM) that DRLWE and NTRU small integer solutions are difficult to solve ensures confidentiality,unforgeability,unconditional anonymity,and linkability.Performance analysis shows that compared to the lattice-based ring signcryption and linkable ring signature schemes on NTRU,the proposed scheme has a smaller public key and lower encryption/decryption cost,greatly improving efficiency.
Although most existing linkable ring signature schemes on lattice can effectively resist quantum attacks, they still have the disadvantages of excessive time and storage overhead. This paper constructs an identity-based linkable ring signature (LRS) scheme over NTRU lattice by employing the technologies of trapdoor generation and rejection sampling. The security of this scheme relies on the small integer solution (SIS) problem on NTRU lattice. We prove that this scheme has unconditional anonymity, unforgeability, and linkability under the random oracle model (ROM). Through the performance analysis, this scheme has a shorter size of public/private keys, and when the number of ring members is small (such as N ≤ 8 ), this scheme has a shorter signature size compared with other existing latest lattice-based LRS schemes. The computational efficiency of signature has also been further improved since it only involves multiplication in the polynomial ring and modular operations of small integers. Finally, we implemented our scheme and other similar schemes, and it is shown that the time for the signature generation and verification of this scheme decreases roughly by 44.951% and 33.503%, respectively.
With the rapid development of quantum computers and quantum computing, Internet of Things (IoT) networks equipped with traditional cryptographic algorithms have become very weak against quantum attacks. This paper focuses on the privacy-preserving problem in IoT networks and proposes a certificateless ring signature (CLRS) scheme. This CLRS is constructed with lattice theories, which show promising advantages in resisting quantum attacks. Meanwhile, the certificateless mechanism reduces the key control ability of the key generation center (KGC) by adding personal secret keys to the private key generated by the system. Meanwhile, the ring signature mechanism protects users' privacy information through a non-central control mechanism. Next, the security proof in a random oracle model is given, which shows that this CLRS scheme can obtain unforgeability and ensure the signer's anonymity. Its security properties include non-repudiation, traceability, and post-quantum security. Then, the efficiency comparison and performance results show that this CLRS scheme is more efficient and practical than similar schemes. Moreover, this work presents an exploration of the post-quantum cryptographic algorithm and its application in IoT networks.
The Edge-enabled Industrial Internet of Things (Edge-IIoT) has emerged as a fundamental architecture for intelligent manufacturing by enabling low-latency data collection, processing, and communication among distributed industrial devices. However, the open and distributed nature of Edge-IIoT introduces significant challenges to secure data authentication and privacy preservation. Meanwhile, conventional public key infrastructure incurs considerable certificate management overhead and is not well suited for future industrial environments in the presence of quantum computing. To address these challenges, this paper proposes a lattice-based certificateless blind signature scheme for secure and privacy-preserving authentication in Edge-IIoT. The proposed scheme integrates the Dilithium signature algorithm with certificateless public key cryptography and blind signature techniques to simultaneously provide anonymous authentication, data integrity, conditional identity revocation, and post-quantum security while eliminating the certificate management overhead associated with traditional public key infrastructures. Furthermore, the proposed construction improves existing lattice-based certificateless blind signature schemes by addressing identified security weaknesses and strengthening resistance against forgery attacks, while effectively avoiding the key escrow problem inherent in identity-based cryptography. The correctness, blindness, and unforgeability of the proposed scheme are formally proved in the random oracle model based on the hardness of the Module Short Integer Solution (MSIS) problem. In addition, theoretical performance analysis demonstrates that the proposed scheme incurs acceptable computational, communication, and storage overhead while providing comprehensive security properties, including certificateless operation, identity anonymity, no key escrow, conditional revocation, and post-quantum security. Overall, the proposed scheme achieves an effective balance between security, privacy preservation, and efficiency, which exhibits favorable theoretical security-efficiency trade-offs for secure industrial data authentication in resource-constrained Edge-IIoT environments. Practical implementation is left for future investigation.