代理多签名方案的密码学分析与修正  

Cryptanalysis and Repair of Multi-proxy Signature Scheme

作　　者：刘文化[1] 聂永卫[1] 禹勇[2] 

机构地区：[1]济源职业技术学院计算机系 [2]电子科技大学计算机科学与工程学院

出　　处：《计算机工程》2009年第15期149-150,共2页Computer Engineering

基　　金：国家自然科学基金资助项目(60573043)

摘　　要：分析Lee提出的代理多签名方案,给出一种伪造攻击,利用该攻击,一个不诚实的原始签名人在不经过其他原始签名人的同意下,可以成功伪造代理签名密钥,从而可以假冒诚实的代理签名人生成验证有效的代理多签名,威胁到代理签名人和其他原始签名人的合法权益。提出4种改进的代理密钥生成算法来修正Lee的方案,可以有效抵抗恶意原始签名人的伪造攻击。A multi-proxy signature scheme is proposed by Lee et al. However, their scheme is insecure. A forgery attack on their multi-proxy signature scheme is proposed in this paper. Using the forgery attack, a dishonest original signer can forgery a proxy signing key on behalf of all the original signers without their agreements and produce valid multi-proxy signatures, which does harm to the benefits of the proxy signer and other original signers. Four improved proxy key generation algorithms are also proposed to repair the scheme, which can resist effectively the forgery attack of original signers.

关 键 词：数字签名 代理签名 代理多签名 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]