对一种代理盲签名方案的密码学分析  

Cryptanalysis of proxy blind signature scheme

作　　者：雷治军[1] 刘文化[2] 禹勇[3] 

机构地区：[1]洛阳师范学院信息技术学院,河南洛阳471022 [2]济源职业技术学院计算机系,河南济源454650 [3]西安电子科技大学ISN国家重点实验室,西安710071

出　　处：《计算机应用》2008年第5期1144-1145,共2页journal of Computer Applications

基　　金：国家自然科学基金资助项目(60573043)

摘　　要：Zhao等提出了一个新的代理盲签名方案,并在此基础上,考虑了签名方程中所有可能的参数选取方法,由此给出了构造代理盲签名方案的一般方法,给出了生成代理密钥的8个方程式。对他们提出的代理盲签名进行了分析,给出了一种伪造攻击,利用这种攻击,不诚实的原始签名人可以成功伪造代理签名密钥,从而假冒诚实的代理签名人生成验证有效的签名,威胁到代理签名人的权益。在Zhao等给出的8种代理密钥方程式中,有一半都无法抵抗这种攻击。A new proxy blind signature scheme was proposed by Zhao et al. recently. Based on this scheme, all possible parameters to be chosen in signature equations were considered and a general method to construct proxy blind signature was obtained, They also proposed eight equations to generate secure proxy signing key. However, their scheme was insecure. A forgery attack on their proxy blind signature scheme was proposed in this paper. Using the forgery attack, a dishonest original signer can forge the proxy signing key and produce valid proxy blind signatures. Among the eight equations of producing proxy signing key, half of them can not resist this kind of attack.

关 键 词：数字签名 代理签名 代理盲签名 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]