无随机预言机的广义指定验证者签名方案  

Universal Designated Verifier Signature without Random Oracles

作　　者：齐亚平[1] 杨波[2,3] 禹勇[4] 

机构地区：[1]西安航空技术高等专科学校计算机系 [2]华南农业大学信息学院 [3]西安电子科技大学ISN国家重点实验室,陕西西安710071 [4]西安电子科技大学ISN国家重点实验室

出　　处：《微电子学与计算机》2007年第10期123-125,129,共4页Microelectronics & Computer

基　　金：国家自然科学基金项目(60573043;60372046)

摘　　要：现有的广义指定验证者签名方案的安全性大都是在随机预言机模型下证明的,但是在该模型下的可证安全并不意味着在现实中是安全的。基于Zhang等人提出的无随机预言机模型下的短签名方案,提出了一个在标准模型下可证安全的广义指定验证者签名方案,其强不可伪造性基于k+1平方根假设和指数知识假设,证明了提出方案在选择公钥和选择消息攻击下是无条件不可传递的。方案的签名长度为1366 bits,比现有方案的签名长度要短。The security of previously known universal designated verifier signature schemes are mostly proven when the random oracles are assumed, but security in the random oracle model does not imply security in the real world. Based on the short signature scheme without random oracles proposed by Zhang et al, a universal designated verifier signature scheme whose security can be proven without random oracles was proposed, and its security proof was given. Its strong unforgeability relies on k ＋1 square roots assumption and knowledge-of-exponent assumption. The proposed scheme achieves unconditional non-transferability against adaptive chosen public key attack and chosen message attack. The length of the proposed scheme is 1366 bits, which is shorter than that of most existing schemes.

关 键 词：广义指定验证者签名 双线性对 指数知识假设 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]