Public key encryption with digital signature scheme
An improved encryption and digital signature system and method in accordance with the invention reuses an encryption ephemeral key pair from an encryption process in a digital signature process. The reuse of the encryption ephemeral key pair in the digital signature process advantageously results in reduced byte size of the digital signature and reduction of costly computation overhead. In a preferred embodiment, the invention is based on the El Gamal encryption scheme and the Nyberg-Rueppel signature scheme. The present invention is particularly useful for operation in conjunction with small communication devices having limited processing and storage, wherein such devices may communicate via bandwidth sensitive RF links.
1. A public-key encryption process for communicating messages, comprising:
encrypting a plaintext message into a ciphertext message using a key pair that is used for a single message;
generating a digital signature for the ciphertext message using the key pair, the digital signature comprising a first value r and a second value s; and
transmitting a public key of the key pair, the ciphertext message, and the second value s of the digital signature;
wherein the first value r of the digital signature is calculated at a receiver using a decrypted form of the plaintext message and the public key, and the digital signature is validated based on the calculated first value r and the transmitted second value s.
2. The public-key encryption process of claim 1 , wherein encrypting utilizes an El Gamal encryption scheme.
3. The public-key encryption process of claim 1 , wherein generating a digital signature comprises hashing the plaintext message and generating the digital signature using a Nyberg-Rueppel digital signature scheme.
4. The public-key encryption process of claim 1 , further comprising producing the key pair by performing steps comprising:
generating a private key x; and
calculating the public key X=xG in a finite cyclic group having G as a generator.
5. The public-key encryption process of claim 4 , further comprising:
generating a secret key K=xB, wherein B is a receiver public key B; and
encrypting a plaintext message using the secret key K to generate a ciphertext message.
6. The public-key encryption process of claim 5 , further comprising:
using the private key x as a signature private key and using the public key X as a signature public key to generate a digital signature.
7. The public-key encryption process of claim 6 , wherein a receiver generates the secret key K by calculating one of: bX, bxG, xbG, and xB, wherein b is a receiver private key b, and decrypts the transmitted ciphertext message using the generated secret key K.
8. The public-key encryption process of claim 1 implemented in a wireless communication system;
wherein at least a two stage public-key encryption process is used;
wherein a first stage includes key establishment and the second stage includes encryption/decryption;
wherein encrypting a plaintext message and generating a digital signature are performed during the second stage of encryption.
9. The public-key encryption process of claim 1 , for encrypting messages for communication between a sender and a receiver, further comprising:
at a sender,
generating a sender private key a; and
calculating a sender public key A=aG, where G is a generator,
and at a receiver,
generating a receiver private key b; and
calculating a receiver public key B=bG,
wherein the sender obtains an authentic copy of the receiver public key B and the receiver obtains an authentic copy of the sender public key A.
10. A computer-implemented public-key encryption system for communicating messages, comprising:
a data processor;
a computer-readable memory encoded with instructions for the commanding the data processor to execute steps including:
encrypting a plaintext message into a ciphertext message using a key pair that is used for a single message;
generating a digital signature for the ciphertext message using the key pair, the digital signature comprising a first value r and a second value s; and
transmitting a public key of the key pair, the ciphertext message, and the second value s of the digital signature;
wherein the first value r of the digital signature is calculated at a receiver using a decrypted form of the plaintext message and the public key, and the digital signature is validated based on the calculated first value r and the transmitted second value s.
11. The public-key encryption system of claim 10 , wherein encrypting utilizes an El Gamal encryption scheme.
12. The public-key encryption system of claim 10 , wherein generating a digital signature comprises hashing the plaintext message and generating the digital signature using a Nyberg-Rueppel digital signature scheme.
13. The public-key encryption system of claim 10 , wherein the key pair is produced by performing steps comprising:
generating an private key x; and
calculating the public key X=xG in a finite cyclic group having G as a generator.
14. The public-key encryption system of claim 13 , wherein the steps further include:
generating a secret key K=xB; and
encrypting a plaintext message using the secret key K to generate a ciphertext message.
15. The public-key encryption system of claim 14 , wherein the steps further include:
using the private key x as a signature private key and using the public key X as a signature public key to generate a digital signature.
16. The public-key encryption system of claim 15 , wherein a receiver generates the secret key K by calculating one of: bX, bxG, xbG, and xB and decrypts the transmitted ciphertext message using the generated secret key K.
17. The public-key encryption system of claim 10 implemented in a wireless communication system;
wherein at least a two stage public-key encryption process is used;
wherein a first stage includes key establishment and the second stage includes encryption/decryption;
wherein encrypting a plaintext message and generating a digital signature are performed during the second stage of encryption.
18. The public-key encryption system of claim 10 , for encrypting messages for communication between a sender and a receiver, further comprising:
at a sender,
generating a sender private key a; and
calculating a sender public key A=aG, where G is a generator, and at a receiver,
generating a receiver private key b; and
calculating a receiver public key B=bG,
wherein the sender obtains an authentic copy of the receiver public key B and the receiver obtains an authentic copy of the sender public key A.
19. A computer-readable memory encoded with instructions for commanding a data processor to execute steps, comprising:
encrypting a plaintext message into a ciphertext message using a key pair that is used for a single message;
generating a digital signature for the ciphertext message using the key pair, the digital signature comprising a first value r and a second value s; and
transmitting a public key of the key pair, the ciphertext message, and the second value s of the digital signature;
wherein the first value r of the digital signature is calculated at a receiver using a decrypted form of the plaintext message and the public key, and the digital signature is validated based on the calculated first value r and the transmitted second value s.