On the Security of Certificateless Signature Schemes from Asiacrypt 2003
On the Security of Certificateless Signature Schemes from Asiacrypt 2003
复制标题
DOI：
10.1007/11599371_2
复制
发表时间：
2005-12
期刊：
影响因子：
--
通讯作者：
Xinyi Huang;W. Susilo;Y. Mu;Futai Zhang
中科院分区：
文献类型：
--
作者：
Xinyi Huang;W. Susilo;Y. Mu;Futai Zhang
在传统的数字签名方案中，需要由可信方签名的证书来确保公钥的真实性。在Asiacrypt 2003中，引入了无证书签名方案的概念。在新的范例中，证书的必要性已经被成功地消除了。本文还介绍了无证书密码的安全模型。然而，正如我们将在本文中显示，建议的无证书签名是不安全的，在他们定义的模型。在他们的模型中，我们给出了一个可以成功伪造无证书签名的攻击.我们也通过提出一个新的方案来解决这个问题。
In traditional digital signature schemes, certificates signed by a trusted party are required to ensure the authenticity of the public key. In Asiacrypt 2003, the concept of certificateless signature scheme was introduced. In the new paradigm, the necessity of certificates has been successfully removed. The security model for certificateless cryptography was also introduced in the same paper. However, as we shall show in this paper, the proposed certificateless signature is insecure in their defined model. We provide an attack thatcan successfully forgea certificateless signature in their model. We also fix this problem by proposing a new scheme.