Cryptanalysis and Improvement of a Multi-Receiver Generalized Signcryption Scheme
Cryptanalysis and Improvement of a Multi-Receiver Generalized Signcryption Scheme
复制标题
DOI：
--
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
Cai-xue Zhou
中科院分区：
文献类型：
--
作者：
Cai-xue Zhou
广义签密（GSC）方案仅用一种算法就可自适应地作为加密方案、签名方案或签密方案来使用。它非常适用于存储受限的环境。在本文中，我们分析了一种多接收者广义签密方案，并表明它在纯加密模式和混合加密模式下无法实现自适应选择密文攻击下的不可区分性（IND - CCA2）安全。我们进一步提出了该方案的一个修订版本，它在不牺牲原方案的高效性和简洁设计的前提下解决了其安全问题。我们改进后的方案在计算性迪菲 - 赫尔曼（CDH）假设下可被证明是IND - CCA2安全的以及在自适应选择消息攻击下是存在性不可伪造的（EUF - CMA）。
Generalized signcryption (GSC) scheme can adaptively work as an encryption scheme, a signature scheme or a signcryption scheme with only one algorithm. It is very suitable for storage-constrained environments. In this paper, we analyze a multi-receiver GSC scheme, and show that it cannot achieve indistinguishability-adaptive chosen ciphertext attack (IND-CCA2) secure in the pure encryption mode and hybrid encryption mode. We further propose a revised version of the scheme, which resolves the security issues of the original scheme without sacrificing its high efficiency and simple design. Our improved scheme can be proved to be IND-CCA2 secure and existentially unforgeable-adaptive chosen message attack (EUF-CMA) under computational Diffie-Hellman (CDH) assumption.