The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 22, 2011

Filed:

Nov. 20, 2007
Applicants:

Jeffrey Hoffstein, Pawtucket, RI (US);

Nicholas A. Howgrave-graham, Arlington, MA (US);

Jill C. Pipher, Pawtucket, RI (US);

Joseph H. Silverman, Needham, MA (US);

William J. Whyte, Somerville, MA (US);

Inventors:

Jeffrey Hoffstein, Pawtucket, RI (US);

Nicholas A. Howgrave-Graham, Arlington, MA (US);

Jill C. Pipher, Pawtucket, RI (US);

Joseph H. Silverman, Needham, MA (US);

William J. Whyte, Somerville, MA (US);

Assignee:

NTRU Cryptosystmes, Inc., Wilmington, MA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/00 (2006.01);
U.S. Cl.
CPC ...
Abstract

A signing technique of a disclosed identification/digital signature method hereof uses a mixing system based on multiplication in a ring and reduction modulo an ideal q in that ring, while a disclosed verification technique uses special properties of products of elements whose validity depends on elementary probability theory. The security of the identification/digital signature scheme comes from the interaction of reduction modulo q and the difficulty of forming products with special properties. In an embodiment of the identification/digital signature scheme hereof that employs a quotient ring of polynomials, the security also relies on the experimentally observed fact that for most lattices, it is very difficult to find a vector whose length is only a little bit longer than the shortest vector, and it is also difficult to find a lattice vector that is quite close to a randomly chosen nonlattice vector.


Find Patent Forward Citations

Loading…