Flores-Carapia Rolando, Silva-García Víctor Manuel, Cardona-López Manuel Alejandro, Villarreal-Cervantes Miguel Gabriel
Centro de Innovación y Desarrollo Tecnológico en Cómputo, Instituto Politécnico Nacional, 07738, CDMX, México.
Centro de Investigación en Computación, Instituto Politécnico Nacional, 07738, CDMX, México.
Sci Rep. 2025 Jan 19;15(1):2435. doi: 10.1038/s41598-024-83943-x.
Given the large volumes of sensitive information transmitted over the Internet, digital signatures are essential for verifying message authenticity and integrity. A key challenge is minimizing computationally intensive operations, such as modular inverses, without compromising security. In this research, we propose the DSADHπ algorithm, which introduces a confusion step directly into the signature itself, rather than only applying it to the message, using a dynamic substitution box. It is generated with the number pi and changes with each signing. In addition, to enhance security, this work uses a 2048-bit prime, double the length frequently used. This proposal induces chaotic behavior in the signature, making it highly sensitive to any changes in the signer's private key or message content, thereby enhancing authentication and integrity verification. Moreover, the proposed algorithm computes a single multiplicative modular inverse during verification and none during signing, unlike other approaches that require inverse computation in both stages. Since the required inverse is for the Diffie-Hellman session key, it always exists and can be precomputed per communication rather than per message. Consequently, DSADHπ is on average 45 times faster than DSA. Additionally, we introduce a method to assess signature security by constructing images from signature bytes generated by slight changes to the signer's private key and message. Then, their chaotic behavior is evaluated with cryptographic metrics.
鉴于通过互联网传输的敏感信息量巨大,数字签名对于验证消息的真实性和完整性至关重要。一个关键挑战是在不影响安全性的前提下,尽量减少诸如模逆运算等计算密集型操作。在本研究中,我们提出了DSADHπ算法,该算法使用动态替换盒,将混淆步骤直接引入签名本身,而不是仅应用于消息。它由数字π生成,并且每次签名时都会改变。此外,为了增强安全性,这项工作使用了2048位素数,其长度是常用长度的两倍。该提议在签名中引入了混沌行为,使其对签名者私钥或消息内容的任何变化高度敏感,从而增强了认证和完整性验证。此外,与其他在两个阶段都需要进行逆运算的方法不同,所提出的算法在验证期间计算单个乘法模逆,而在签名期间不进行计算。由于所需的逆是针对Diffie-Hellman会话密钥,它总是存在并且可以针对每次通信而不是每条消息进行预计算。因此,DSADHπ平均比DSA快45倍。此外,我们引入了一种方法,通过从签名者私钥和消息的微小变化生成的签名字节构建图像来评估签名安全性。然后,使用加密指标评估它们的混沌行为。