
CLC number:
On-line Access: 2026-03-30
Received: 2025-11-14
Revision Accepted: 2026-03-07
Crosschecked: 0000-00-00
Cited: 0
Clicked: 24
Xinyue ZHANG, Kunyi LAI, Xin TANG. Reversible data hiding in encrypted domain based on NTRU and Chinese remainder theorem[J]. Journal of Zhejiang University Science C, 1998, -1(-1): .
@article{title="Reversible data hiding in encrypted domain based on NTRU and Chinese remainder theorem",
author="Xinyue ZHANG, Kunyi LAI, Xin TANG",
journal="Journal of Zhejiang University Science C",
volume="-1",
number="-1",
pages="",
year="1998",
publisher="Zhejiang University Press & Springer",
doi="10.1631/ENG.ITEE.2025.0138"
}
%0 Journal Article
%T Reversible data hiding in encrypted domain based on NTRU and Chinese remainder theorem
%A Xinyue ZHANG
%A Kunyi LAI
%A Xin TANG
%J Journal of Zhejiang University SCIENCE C
%V -1
%N -1
%P
%@ 1869-1951
%D 1998
%I Zhejiang University Press & Springer
%DOI 10.1631/ENG.ITEE.2025.0138
TY - JOUR
T1 - Reversible data hiding in encrypted domain based on NTRU and Chinese remainder theorem
A1 - Xinyue ZHANG
A1 - Kunyi LAI
A1 - Xin TANG
J0 - Journal of Zhejiang University Science C
VL - -1
IS - -1
SP -
EP -
%@ 1869-1951
Y1 - 1998
PB - Zhejiang University Press & Springer
ER -
DOI - 10.1631/ENG.ITEE.2025.0138
Abstract: reversible data hiding in the encrypted domain (RDH-ED) based on homomorphic encryption provides a promising approach for privacy-preserving data sharing, yet existing methods based on the Nth-degree truncated polynomial ring unit (NTRU) face a fundamental conflict between embedding capacity and reversibility, often requiring preprocessing of plaintext, which in turn compromises randomness of the ciphertext obtained. To address these issues, a novel RDH-ED scheme integrating the chinese remainder theorem (CRT) with the NTRU cryptosystem is proposed in this study. The proposed scheme operates without any preprocessing of the plaintext and constructs multichannel redundancy in the ciphertext domain, thereby fully preserving the original polynomial structure of the plaintext. By employing a CRT-based encoding, multiple bits of information are enabled to be carried by a single polynomial coeffcient, achieving an embedding capacity of 503 bits per polynomial with moderate-sized parameters. Moreover, the embedded data can be extracted before decryption via pre-negotiated coprime parameters, ofering greater operational flexibility. Rigorous mathematical constraints ensure that the redundancy term is automatically eliminated during decryption, thereby guaranteeing lossless recovery of the original content. Experimental results demonstrate that the proposed scheme achieves a substantially higher embedding capacity compared to predominant RDH-ED methods based on NTRU, Paillier, and ElGamal cryptosystems, without compromising security or effciency.
Open peer comments: Debate/Discuss/Question/Opinion
<1>