NTRU密码算法的安全性分析

随着量子计算的快速发展,目前主流的公钥密码体制如RSA、ECC等均已找到多项式时间复杂度的量子求解算法.NTRU密码算法由于至今未找到有效的量子求解算法,被认为具有抗量子计算攻击的能力,加之其具有加解密速度快、内存需求小等特点,已经在公钥密码领域受到了广泛关注.首先介绍NTRU密码算法的加解密流程以及算法的改进方案,然后从格攻击和非格攻击两方面分析NTRU密码算法的安全性,重点介绍格攻击在子域上的最新进展,以及解密错误攻击的提出和改进.

Cryptanalysis of NTRU cryptosystem

With the rapid development of quantum computing,most public key cryptosystem such as RSA,ECC etc.can be broken within polynomial time complexity by quantum computer algorithm.NTRU has drawn considerable attention for its potential anti-quantum ability,high speed,low memory requirements.In this paper,we first introduce the NTRU cryptosystem.Then,our attention will be focused on the security of NTRU cryptosystem under the lattice attack and non-lattice attack,especially,the latest works on the subfield lattice attack and the decryption failed attack.