两种环签名方案的安全性分析及其改进  

Cryptanalysis and Improvement of Two Ring Signature Schemes

作　　者：王化群[1] 张力军[1] 赵君喜[2] 

机构地区：[1]南京邮电学院信息工程系 [2]南京邮电学院应用数理系,南京210003

出　　处：《电子与信息学报》2007年第1期201-204,共4页Journal of Electronics & Information Technology

基　　金：国家自然科学基金重点项目(60432040)资助课题

摘　　要：通过对Xu(2004)和Zhang(2004)提出的两种环签名方案进行分析,指出了这两种环签名方案都容易受到群成员改变攻击(group-changingattack),并给出了攻击方法;另外,Zhang的方案还容易受到多已知签名存在伪造(multiple-known-signatureexistentialforgery)攻击。为防范这两种攻击,对这两种环签名方案进行了改进,改进后的方案在最强的安全模型(Joseph,2004提出)中仍是安全的。The security of the two ring signature schemes proposed by Xu（2004） and Zhaag（2004） is analyzed, and it＇s found that both the ring signature schemes are susceptible to group-changing attack. In addition, Zhang＇s scheme can easily be attacked by multiple-known-signature existential forgery. To guard against the two attacks, the two ring signature schemes are improved, which can make the improved schemes is still secure even in the strongest security model （proposed by Joseph in 2004）.

关 键 词：环签名 双线性对 伪造攻击 GDP(Gap Diffie-Hellman) 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]