Study on a provably secure certificateless aggregate signature scheme
Study on a provably secure certificateless aggregate signature scheme
复制标题
DOI：
10.1109/icnsc.2016.7479022
复制
发表时间：
2016-04
期刊：
影响因子：
--
通讯作者：
Yan Liu;Xiaoming Hu;Wenan Tan
中科院分区：
文献类型：
--
作者：
Yan Liu;Xiaoming Hu;Wenan Tan
无证书签名因其成功解决了传统公钥密码学和基于身份密码学之间的问题而成为密码学研究的热点之一。由于无证书签名方案的计算特性，它更适合应用在某些资源受限的网络环境中，例如无线传感器网络等。本文分析了Du等人的无证书聚合签名方案的安全性。分析表明，Du等人提出的无证书聚合签名方案不具备不可伪造的安全性。即使没有签名者的私钥，恶意的 KCG（密钥生成中心）也可以在任何指定消息上伪造有效的聚合签名。为了克服这个问题，本文采用在改进的无证书聚合签名方案中添加哈希函数的方法。我们的改进方案能够在不增加计算成本的情况下抵抗伪造攻击。
The certificateless signature has become one of the hotspots of cryptography research owing to its successful resolution of problems between traditional public key cryptography and identity-based cryptography. Because of the calculation characteristics of the certificateless signature scheme, it is more suitable to be applied in certain network environment in which the resource is constrained, such as wireless sensor networks and so on. This paper analyzes the security of Du et al.'s certificateless aggregate signature scheme. The analysis shows that Du et al.'s certificateless aggregate signature scheme does not have the security property of unforgeability. A malicious KCG(Key Generation Center) can forge a valid aggregate signature on any designated message even without the signer's private key. In order to overcome this problem, this paper adopts a method of adding a hash function to the improved certificateless aggregate signature scheme. Our improved scheme is capable of resisting the forgery attack without increasing the computational cost.