三类无证书签名方案的缺陷及改进  

Flaw and Improvement of Three Certificateless Signature Schemes

作　　者：农强[1] 郝艳华[1] 吴顺祥[2] 

机构地区：[1]漳州师范学院计算机科学与工程系 [2]厦门大学自动化系

出　　处：《计算机工程》2009年第16期140-142,共3页Computer Engineering

基　　金：国家自然科学基金资助项目(60704042);国家"十一五"科技支撑计划基金资助项目(2007BAK34B04);福建省教育厅科技基金资助项目(JA08156);福建省青年科技人才创新基金资助项目(2008F3110)

摘　　要：对最近提出的2个在随机预言模型中可证安全的无证书签名方案和1个在标准模型中可证安全的无证书签名方案进行安全性分析,指出这3个方案不能抵抗替换公钥攻击的安全隐患,在这种攻击下攻击者能够生成新的公钥满足合法签名者生成的合法签名。给出改进措施,有效克服原方案中的设计缺陷。The security flaws of two provably-secure certificateless signature schemes in the random oracle model and a provably-secure certificateless signature scheme in the standard model are analyzed. It is found that the three schemes are all insecure against public key replacement attack. In this attack, an adversary can generate a new public key satisfying legitimate signatures created by the legitimate signer. In order to avoid these flaws, an improvement measure is proposed, which can resolve the security problems existing in the original schemes.

关 键 词：无证书签名 替换公钥攻击 双线性对 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]