https://meteor6699.github.io/tags/%E5%AF%86%E7%A0%81%E5%AD%A6/Recent content in 密码学 on METEORHugo -- gohugo.iozh-CN© 2026 METEORTue, 15 Sep 2026 00:00:00 +0000https://meteor6699.github.io/p/%E4%BB%8E%E5%93%88%E5%B8%8C%E5%88%B0%E5%8F%AF%E7%BC%96%E8%BE%91%E5%8C%BA%E5%9D%97%E9%93%BE%E6%8A%8A%E5%8C%BA%E5%9D%97%E9%93%BE%E7%9A%84%E6%A0%B8%E5%BF%83%E6%A6%82%E5%BF%B5%E8%AE%B2%E6%98%8E%E7%99%BD/Tue, 15 Sep 2026 00:00:00 +0000https://meteor6699.github.io/p/%E4%BB%8E%E5%93%88%E5%B8%8C%E5%88%B0%E5%8F%AF%E7%BC%96%E8%BE%91%E5%8C%BA%E5%9D%97%E9%93%BE%E6%8A%8A%E5%8C%BA%E5%9D%97%E9%93%BE%E7%9A%84%E6%A0%B8%E5%BF%83%E6%A6%82%E5%BF%B5%E8%AE%B2%E6%98%8E%E7%99%BD/<p>很多人第一次接触区块链时，会记住“不可篡改”四个字，却不一定知道这四个字是怎样实现的。再往前一步，就会遇到几个容易混淆的概念：哈希为什么会因为一点改动而完全不同？哈希碰撞是不是一定代表系统不安全？陷门又是什么？</p>https://meteor6699.github.io/p/%E4%BB%8E-elgamal-%E5%88%B0%E9%97%A8%E9%99%90%E7%A7%98%E5%AF%86%E5%85%B1%E4%BA%AB%E4%B8%80%E7%AF%87%E7%9C%8B%E6%87%82%E5%88%86%E5%B8%83%E5%BC%8F%E8%A7%A3%E5%AF%86dkg-%E4%B8%8E%E9%97%A8%E9%99%90%E7%AD%BE%E5%90%8D%E7%9A%84%E6%95%99%E7%A8%8B/Sun, 30 Aug 2026 00:00:00 +0000https://meteor6699.github.io/p/%E4%BB%8E-elgamal-%E5%88%B0%E9%97%A8%E9%99%90%E7%A7%98%E5%AF%86%E5%85%B1%E4%BA%AB%E4%B8%80%E7%AF%87%E7%9C%8B%E6%87%82%E5%88%86%E5%B8%83%E5%BC%8F%E8%A7%A3%E5%AF%86dkg-%E4%B8%8E%E9%97%A8%E9%99%90%E7%AD%BE%E5%90%8D%E7%9A%84%E6%95%99%E7%A8%8B/<p>把一把私钥交给单个人保管很方便，但也很脆弱：私钥一旦泄露，攻击者就能解密全部历史密文；保管者离线或丢失密钥，合法用户同样无法恢复数据。</p> <p>门限密码学给出的思路是：<strong>不让任何一个人持有完整私钥</strong>。私钥被拆成多个份额，只有达到门限的一组参与者协作，才能完成解密或签名。本文从 ElGamal 出发，系统梳理这条主线：</p> <ul> <li>ElGamal 为什么可以“分布式解密”；</li> <li>Shamir $(t,n)$ 门限秘密共享怎样拆分和恢复秘密；</li> <li>如何把“恢复秘密”改造成“不暴露秘密的联合解密”；</li> <li>DKG、主动份额更新为什么能减少单点风险和长期泄露风险；</li> <li>门限签名、特殊份额、加权份额、可变阈值分别解决什么问题。</li> </ul>https://meteor6699.github.io/p/cp-abe%E5%AF%86%E6%96%87%E7%AD%96%E7%95%A5%E5%B1%9E%E6%80%A7%E5%9F%BA%E5%8A%A0%E5%AF%86bethencourt-sahai-waters-2007/Mon, 17 Aug 2026 00:00:00 +0000https://meteor6699.github.io/p/cp-abe%E5%AF%86%E6%96%87%E7%AD%96%E7%95%A5%E5%B1%9E%E6%80%A7%E5%9F%BA%E5%8A%A0%E5%AF%86bethencourt-sahai-waters-2007/<h2 id="什么是属性基加密abe" class="relative group scroll-mt-28">什么是属性基加密（ABE）？ <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e4%bb%80%e4%b9%88%e6%98%af%e5%b1%9e%e6%80%a7%e5%9f%ba%e5%8a%a0%e5%af%86abe" aria-label="锚点">#</a> </span> </h2> <p>属性基加密（Attribute-Based Encryption, ABE）是一种<strong>基于属性的公钥加密</strong>方案。与传统公钥加密（PKI）不同，ABE 不再用「某个用户身份」来标识公钥和私钥，而是用<strong>一组属性（Attributes）</strong>。</p>https://meteor6699.github.io/p/%E5%B1%9E%E6%80%A7%E5%8A%A0%E5%AF%86%E9%80%9A%E4%BF%97%E6%8C%87%E5%8D%97%E8%AE%A9%E4%BA%91%E4%B8%8A%E7%9A%84%E6%95%B0%E6%8D%AE%E8%AE%A4%E4%BA%BA%E4%B8%8D%E8%AE%A4%E8%84%B8/Mon, 17 Aug 2026 00:00:00 +0000https://meteor6699.github.io/p/%E5%B1%9E%E6%80%A7%E5%8A%A0%E5%AF%86%E9%80%9A%E4%BF%97%E6%8C%87%E5%8D%97%E8%AE%A9%E4%BA%91%E4%B8%8A%E7%9A%84%E6%95%B0%E6%8D%AE%E8%AE%A4%E4%BA%BA%E4%B8%8D%E8%AE%A4%E8%84%B8/<h2 id="先从一个场景说起" class="relative group scroll-mt-28">先从一个场景说起 <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e5%85%88%e4%bb%8e%e4%b8%80%e4%b8%aa%e5%9c%ba%e6%99%af%e8%af%b4%e8%b5%b7" aria-label="锚点">#</a> </span> </h2> <p>想象你有一份机密文档，放在云盘上。你希望：</p>https://meteor6699.github.io/p/microsoft-seal-%E5%85%A5%E9%97%A8%E5%90%8C%E6%80%81%E5%8A%A0%E5%AF%86%E5%AE%9E%E6%88%98/Thu, 16 Jul 2026 00:00:00 +0000https://meteor6699.github.io/p/microsoft-seal-%E5%85%A5%E9%97%A8%E5%90%8C%E6%80%81%E5%8A%A0%E5%AF%86%E5%AE%9E%E6%88%98/<h2 id="什么是同态加密" class="relative group scroll-mt-28">什么是同态加密？ <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e4%bb%80%e4%b9%88%e6%98%af%e5%90%8c%e6%80%81%e5%8a%a0%e5%af%86" aria-label="锚点">#</a> </span> </h2> <p>同态加密（Homomorphic Encryption）是一种特殊的加密方式，允许在密文上直接进行计算，解密后的结果与在明文上计算的结果相同。</p>https://meteor6699.github.io/p/libote%E4%B8%8D%E7%BB%8F%E6%84%8F%E4%BC%A0%E8%BE%93%E6%89%A9%E5%B1%95%E5%BA%93%E8%AF%A6%E8%A7%A3/Wed, 15 Jul 2026 00:00:00 +0000https://meteor6699.github.io/p/libote%E4%B8%8D%E7%BB%8F%E6%84%8F%E4%BC%A0%E8%BE%93%E6%89%A9%E5%B1%95%E5%BA%93%E8%AF%A6%E8%A7%A3/<h2 id="什么是不经意传输" class="relative group scroll-mt-28">什么是不经意传输？ <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e4%bb%80%e4%b9%88%e6%98%af%e4%b8%8d%e7%bb%8f%e6%84%8f%e4%bc%a0%e8%be%93" aria-label="锚点">#</a> </span> </h2> <p>不经意传输（Oblivious Transfer, OT）是安全多方计算的基础协议之一。</p>https://meteor6699.github.io/p/vole-psi%E5%9F%BA%E4%BA%8E%E5%90%91%E9%87%8F-ole-%E7%9A%84%E9%9A%90%E7%A7%81%E9%9B%86%E5%90%88%E4%BA%A4%E9%9B%86/Tue, 14 Jul 2026 00:00:00 +0000https://meteor6699.github.io/p/vole-psi%E5%9F%BA%E4%BA%8E%E5%90%91%E9%87%8F-ole-%E7%9A%84%E9%9A%90%E7%A7%81%E9%9B%86%E5%90%88%E4%BA%A4%E9%9B%86/<h2 id="什么是隐私集合交集psi" class="relative group scroll-mt-28">什么是隐私集合交集（PSI）？ <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e4%bb%80%e4%b9%88%e6%98%af%e9%9a%90%e7%a7%81%e9%9b%86%e5%90%88%e4%ba%a4%e9%9b%86psi" aria-label="锚点">#</a> </span> </h2> <p>隐私集合交集（Private Set Intersection）允许两方在不泄露各自集合内容的前提下，计算出两个集合的交集。</p>