Lecture Notes in Computer Science 5487

Transcription

1 Lecture Notes in Computer Science 5487 Commenced Publication in 1973 Founding and Former Series Editors: Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen Editorial Board David Hutchison Lancaster University, UK Takeo Kanade Carnegie Mellon University, Pittsburgh, PA, USA Josef Kittler University of Surrey, Guildford, UK Jon M. Kleinberg Cornell University, Ithaca, NY, USA Alfred Kobsa University of California, Irvine, CA, USA Friedemann Mattern ETH Zurich, Switzerland John C. Mitchell Stanford University, CA, USA Moni Naor Weizmann Institute of Science, Rehovot, Israel Oscar Nierstrasz University of Bern, Switzerland C. Pandu Rangan Indian Institute of Technology, Madras, India Bernhard Steffen University of Dortmund, Germany Madhu Sudan Massachusetts Institute of Technology, MA, USA Demetri Terzopoulos University of California, Los Angeles, CA, USA Doug Tygar University of California, Berkeley, CA, USA Gerhard Weikum Max-Planck Institute of Computer Science, Saarbruecken, Germany

2 Moti Yung Peng Liu Dongdai Lin (Eds.) Information Security and Cryptology 4th International Conference, Inscrypt 2008 Beijing, China, December 14-17, 2008 Revised Selected Papers 13

3 Volume Editors Moti Yung Google Inc. and Columbia University Computer Science Department Room 464, S.W. Mudd Building, New York, NY 10027, USA Peng Liu Pennsylvania State University College of Information Sciences and Technology University Park, PA 16802, USA Dongdai Lin SKLOIS, Institute of Software, Chinese Academy of Sciences Beijing , China Library of Congress Control Number: Applied for CR Subject Classification (1998): E.3, D.4.6, F.2.1, C.2, J.1, C.3, K.4.4, K.6.5 LNCS Sublibrary: SL 4 Security and Cryptology ISSN ISBN Springer Berlin Heidelberg New York ISBN Springer Berlin Heidelberg New York This work is subject to copyright. All rights are reserved, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, re-use of illustrations, recitation, broadcasting, reproduction on microfilms or in any other way, and storage in data banks. Duplication of this publication or parts thereof is permitted only under the provisions of the German Copyright Law of September 9, 1965, in its current version, and permission for use must always be obtained from Springer. Violations are liable to prosecution under the German Copyright Law. springer.com Springer-Verlag Berlin Heidelberg 2009 Printed in Germany Typesetting: Camera-ready by author, data conversion by Scientific Publishing Services, Chennai, India Printed on acid-free paper SPIN: /

4 Preface The 4th China International Conference on Information Security and Cryptology (Inscrypt 2008) was co-organized by the Chinese Association for Cryptologic Research and by the State Key Laboratory of Information Security. The conference was held in Beijing, China in mid-december, and was further sponsored by the Institute of Software, the Graduate University of the Chinese Academy of Sciences, and the National Natural Science Foundations of China. Given its four-year success, Inscrypt is now a tradition. It is, in fact, a leading annual international event in the area of cryptography and information security, taking place in China. We are pleased to report the continuous support of the entire community: authors, attendees, committee members, reviewers, sponsors, and organizers. This state of affairs reflects the fact that the research areas covered by Inscrypt are important to modern computing, where increased security, trust, safety, and reliability are required. This need makes sure that the relevant research community, worldwide, continues producing important fundamental, experimental, and applied work in the wide areas of cryptography and information security research. It is not a surprise that the scientific program of Inscrypt 2008 covered numerous fields of research within these general areas. The International Program Committee of Inscrypt 2008 received a total of 183 submissions from 23 countries and regions, with only 40 being selected for presentation: 28 submissions which are collected in this volume, were chosen for the regular papers track and 12 for the short papers track. All anonymous submissions were reviewed by experts in the relevant areas and based on their ranking, technical remarks, and strict selection criteria the papers were chosen to the various tracks. The selection to both tracks was a highly competitive process. We note also that reviews of submissions by committee members were hidden from their authors throughout the entire review process. We further note that due to the conference format, many good papers have regrettably not been accepted. Inscrypt 2008 was made possible by the joint efforts of numerous people and organizations worldwide. We take this opportunity to thank the Program Committee members and the external experts they employed for their invaluable help in producing the conference program. We further thank the conference Organizing Committee, the various sponsors, and the conference attendees. Last but not least, we express our great gratitude to all the authors who submitted papers to the conference, the invited speakers, and the session Chairs. December 2008 Moti Yung Peng Liu Dongdai Lin

5 Inscrypt th China International Conference on Information Security and Cryptology Beijing, China December 15-17, 2008 Sponsored and organized by the Chinese Association for Cryptologic Research and State Key Laboratory of Information Security (Chinese Academy of Sciences) General Chairs Dengguo Feng SKLOIS, Chinese Academy of Sciences, China Program Co-chairs Moti Yung Peng Liu Dongdai Lin Program Committee Vladimir S. Anashin Vijay Atluri Marina Blanton Zhenfu Cao Claude Carlet Jean-Sebastien Coron Marc Dacier Cunsheng Ding Jintai Ding Stefan Dziembowski Jean-Charles Faugere Guang Gong Qijun Gu Martin Hell Google Inc. and Columbia University, USA Pennsylvania State University, USA SKLOIS, Institute of Software, Chinese Academy of Sciences, China Moscow University, Russia Rutgers University, USA University of Notre Dame, USA Shanghai Jiaotong University, China INRIA,University Paris 8, France University of Luxembourg, Luxembourg Symantec Research Labs Europe, France Hong Kong University of Science and Technology, Hong Kong University of Cincinnati, USA University of Rome La Sapienza, Italy INRIA, France University of Waterloo, Canada Texas State University, USA University of Lund, Sweden

6 VIII Organization Xuxian Jiang Jiwu Jing Brian King Miroslaw Kutylowski Chi-Sung Lai DongHoon Lee Albert Levi Jianhua Li Jie Li Ninghui Li Yingjiu Li Benoit Libert Javier Lopez Xiapu Luo Bodo Moeller Mridul Nandi Peng Ning Eiji Okamoto Ludovic Perret Giuseppe Persiano Raphael C.-W. Phan Bimal K. Roy Kouichi Sakurai Bhavani Thuraisingham Carmela Troncoso Shabsi Walfish Huaxiong Wang Xiaoyun Wang Chuankun Wu Shouhuai Xu Meng Yu Erik Zenner Yuliang Zheng Jianying Zhou Sencun Zhu North Carolina State University, USA Graduate University of CAS, China Indiana University-Purdue University, Indianapolis, USA Wroclaw University of Technology, Poland National Cheng Kung University, Taiwan Korea University, Korea Sabanci University, Turkey Shanghai Jiaotong University, China University of Tsukuba, Japan Purdue University, USA Singapore Management University, Singapore Universite Catholique de Louvain, Belgium University of Malaga, Spain Hong Kong Polytechnic University, Hong Kong Google Inc., Zurich, Switzerland NIST, USA North Carolina State University, USA Tsukuba University, Japan LIP6/INRIA Paris-Rocquencourt, France University of Salerno, Italy Loughborough University, UK Indian Statistical Institute, India Kyushu University, Japan University of Texas at Dallas, USA K.U. Leuven, Belgium Google Inc., USA Nanyang Technological University, Singapore Shandong University, China Institute of Software, CAS, China University of Texas at San Antonio, USA Western Illinois University, USA Technical University of Denmark, Denmark University of North Carolina at Charlotte, USA Institute for Infocomm Research, Singapore Pennsylvania State University, USA Organizing Committee Co-chairs Jiwu Jing Zhijun Qiang SKLOIS, Graduate University of Chinese Academy of Sciences, China Chinese Association for Cryptologic Research, China

7 Organization IX Organizing Committee Chuankun Wu Daren Zha Xiaoyang Wen Aihua Zhang SKLOIS, Institute of Software of CAS, China Secretary and Treasurer Shi Zhang WEB/Registration Yicong Liu Jingjing Wu

8 Table of Contents Invited Talks The State of Hash Functions and the NIST SHA-3 Competition (Extended Abstract)... 1 Bart Preneel Key Evolution Systems in Untrusted Update Environments Benoît Libert, Jean-Jacques Quisquater, and Moti Yung Secure and Privacy-Preserving Information Brokering Peng Liu Digital Signature and Signcryption Schemes Provably Secure Convertible Nominative Signature Scheme Wei Zhao, Changlu Lin, and Dingfeng Ye Cryptanalysis of Two Ring Signcryption Schemes Huaqun Wang and Hong Yu Efficient Signcryption Key Encapsulation without Random Oracles Fagen Li, Masaaki Shirase, and Tsuyoshi Takagi Privacy and Anonymity Strong Anonymous Signatures Rui Zhang and Hideki Imai Publicly Verifiable Privacy-Preserving Group Decryption Bo Qin, Qianhong Wu, Willy Susilo, and Yi Mu Privacy for Private Key in Signatures Qianhong Wu, Bo Qin, Yi Mu, and Willy Susilo Message Authentication Code and Hash Function Security of Truncated MACs Peng Wang, Dengguo Feng, Changlu Lin, and Wenling Wu Security Analysis of Multivariate Polynomials for Hashing Luk Bettale, Jean-Charles Faugère, and Ludovic Perret

9 XII Table of Contents Secure Protocols SPVT-II: An Efficient Security Protocol Verifier Based on Logic Programming MengJun Li, Ti Zhou, and ZhouJun Li Batch ZK Proof and Verification of OR Logic Kun Peng and Feng Bao Symmetric Cryptography Constructing Variable-Length PRPs and SPRPs from Fixed-Length PRPs Debra L. Cook, Moti Yung, and Angelos Keromytis Impossible Differential Analysis of Reduced Round CLEFIA Wenying Zhang and Jing Han Reducible Polynomial over F 2 Constructed by Trinomial σ LFSR Guang Zeng, Yang Yang, Wenbao Han, and Shuqin Fan Certificateless Cryptography Chosen Ciphertext Secure Certificateless Threshold Encryption in the Standard Model Piyi Yang, Zhenfu Cao, and Xiaolei Dong Further Observations on Certificateless Public Key Encryption Xu an Wang, Xinyi Huang, and Xiaoyuan Yang Hardware Implementation and Side Channel Attack Efficient Hardware Architecture of SHA-256 Algorithm for Trusted Mobile Computing Mooseop Kim, Jaecheol Ryou, and Sungik Jun New Elliptic Curve Multi-scalar Multiplication Algorithm for a Pair of Integers to Resist SPA Duo Liu, Zhiyong Tan, and Yiqi Dai Wireless Network Security A Novel Marking Probability Distribution Using Probability Propagation in Hierarchical WSN Bo-Chao Cheng, Huan Chen, and Guo-Tan Liao

10 Table of Contents XIII Key Predistribution Schemes Using Codes in Wireless Sensor Networks Sushmita Ruj and Bimal Roy Efficient Multi-PKG ID-Based Signcryption for Ad Hoc Networks Fagen Li, Masaaki Shirase, and Tsuyoshi Takagi Public Key and Identity Based Cryptography On the Computational Efficiency of XTR Ningbo Mu, Yupu Hu, and Leyou Zhang A Variant of Boneh-Gentry-Hamburg s Pairing-Free Identity Based Encryption Scheme Mahabir Prasad Jhanwar and Rana Barua Inter-domain Identity-Based Proxy Re-encryption Qiang Tang, Pieter Hartel, and Willem Jonker Access Control and Network Security Hardening Botnet by a Rational Botmaster Zonghua Zhang, Ruo Ando, and Youki Kadobayashi Separation of Duty in Trust-Based Collaboration Lingli Deng, Yeping He, and Ziyao Xu Trusted Computing and Applications An Integrity Assurance Mechanism for Run-Time Programs Ziyao Xu, Yeping He, and Lingli Deng A Security and Performance Evaluation of Hash-Based RFID Protocols Tong-Lee Lim, Tieyan Li, and Yingjiu Li Correction, Optimisation and Secure and Efficient Application of PBD Shuffling Kun Peng and Feng Bao Author Index