Attack on Digital Multi-Signature Scheme Based on Elliptic Curve Cryptosystem  

作　　者：刘铎 罗平 戴一奇 

机构地区：[1]Department of Computer Science and Technology, Tsinghua University, Bcijing 100084, China

出　　处：《Journal of Computer Science & Technology》2007年第1期92-94,共3页计算机科学技术学报（英文版）

基　　金：This work is supported by the National Natural Science Foundation of China under Grant No. 90304014 and the National Grand Fundamental Research 973 Program of China under Grant No. 2003CB314805.

摘　　要：The concept of multisignature, in which multiple signers can cooperate to sign the same message and any verifier can verify the validity of the multi-signature, was first introduced by Itakura and Nakamura. Several multisignature schemes have been proposed since. Chen et al. proposed a new digital multi-signature scheme based on the elliptic curve cryptosystem recently. In this paper, we show that their scheme is insecure, for it is vulnerable to the so-called active attacks, such as the substitution of a ＂false＂ public key to a ＂true＂ one in a key directory or during transmission. And then the attacker can sign a legal signature which other users have signed and forge a signature himself which can be accepted by the verifier.The concept of multisignature, in which multiple signers can cooperate to sign the same message and any verifier can verify the validity of the multi-signature, was first introduced by Itakura and Nakamura. Several multisignature schemes have been proposed since. Chen et al. proposed a new digital multi-signature scheme based on the elliptic curve cryptosystem recently. In this paper, we show that their scheme is insecure, for it is vulnerable to the so-called active attacks, such as the substitution of a ＂false＂ public key to a ＂true＂ one in a key directory or during transmission. And then the attacker can sign a legal signature which other users have signed and forge a signature himself which can be accepted by the verifier.

关 键 词：digital signature MULTI-SIGNATURE elliptic curve CRYPTOGRAPHY 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]