Title: Signer-Optimal Multiple-Time Post-Quantum Hash-Based Signature for Heterogeneous IoT Systems Show Chinese title

Title: 异构物联网系统的签名者最优多时间后量子哈希基签名

Abstract: Heterogeneous Internet of Things (IoTs) harboring resource-limited devices like wearable sensors are essential for next-generation networks. Ensuring the authentication and integrity of security-sensitive telemetry in these applications is vital. Digital signatures provide scalable authentication with non-repudiation and public verifiability, making them essential tools for IoTs. However, emerging quantum computers necessitate post-quantum (PQ) secure solutions, yet existing NIST-PQC standards are costlier than their conventional counterparts and unsuitable for resource-limited IoTs. There is a significant need for lightweight PQ-secure digital signatures that respect the resource constraints of low-end IoTs. We propose a new multiple-time hash-based signature called Maximum Utilization Multiple HORS (MUM-HORS) that offers PQ security, short signatures, fast signing, and high key utilization for an extended lifespan. MUM-HORS addresses the inefficiency and key loss issues of HORS in offline/online settings by introducing compact key management data structures and optimized resistance to weak-message attacks. We tested MUM-HORS on two embedded platforms (ARM Cortex A-72 and 8-bit AVR ATmega2560) and commodity hardware. Our experiments confirm up to 40x better utilization with the same signing capacity (2^20 messages, 128-bit security) compared to multiple-time HORS while achieving 2x and 156-2463x faster signing than conventional-secure and NIST PQ-secure schemes, respectively, on an ARM Cortex. These features make MUM-HORS ideal multiple-time PQ-secure signature for heterogeneous IoTs. Show Chinese abstract

Abstract: 承载资源受限设备（如可穿戴传感器）的异构物联网（IoTs）对于下一代网络至关重要。 确保这些应用中安全敏感遥测的身份验证和完整性至关重要。 数字签名提供了可扩展的身份验证，并具备不可否认性和公钥验证性，使其成为IoTs的重要工具。 然而，新兴的量子计算机需要后量子（PQ）安全解决方案，但现有的NIST-PQC标准比传统的方案成本更高，且不适合资源受限的IoTs。 迫切需要一种轻量级的PQ安全数字签名，以符合低端IoTs的资源限制。 我们提出了一种新的多次哈希基签名，称为最大利用率多重HORS（MUM-HORS），它提供了PQ安全性、短签名、快速签名以及高密钥利用率以延长使用寿命。 通过引入紧凑型密钥管理数据结构和优化对弱消息攻击的抵抗能力，MUM-HORS解决了HORS在离线/在线设置中的效率低下和密钥丢失问题。 我们在两个嵌入式平台（ARM Cortex A-72 和 8位AVR ATmega2560）以及通用硬件上测试了MUM-HORS。 我们的实验表明，与多次HORS相比，在相同的签名容量（2^20条消息，128位安全性）下，MUM-HORS的利用率提高了40倍；在ARM Cortex上，其签名速度分别是传统安全方案的2倍和NIST PQ安全方案的156-2463倍。 这些特性使MUM-HORS成为异构IoTs的理想多次PQ安全签名方案。