Certificateless Encryption Scheme Secure in Standard Model  

作　　者：张国艳 王小云 

机构地区：[1]School of Computer Science and Technology, Shandong University [2]Key Laboratory of Cryptologic Technology and Information Security of the Ministry of Education, Shandong University [3]Center for Advanced Study, Tsinghua University

出　　处：《Tsinghua Science and Technology》2009年第4期452-459,共8页清华大学学报（自然科学版（英文版）

基　　金：Supported by the National Key Basic Research and Development (973) Program of China (No. 2007CB807902);the National Natural Science Foundation of China (Nos. 90604036 and 60525201)

摘　　要：The scheme introduced by Hwang and Liu in 2008 is shown to be insecure against the key re- placement attack. A more practical attack model is introduced, and according to this model, an efficient cer- tificateless encryption scheme is presented which is IND-CCA secure against both Type I and Type II at- tackers without random oracle. This encryption scheme can defend against the malicious key generation center attack, and can reach Girault＇s trusted level 3 as in traditional public key infrastructure-based cryp- tography. This certificateless encryption scheme has a shorter public key than other schemes in the stan- dard model.The scheme introduced by Hwang and Liu in 2008 is shown to be insecure against the key re- placement attack. A more practical attack model is introduced, and according to this model, an efficient cer- tificateless encryption scheme is presented which is IND-CCA secure against both Type I and Type II at- tackers without random oracle. This encryption scheme can defend against the malicious key generation center attack, and can reach Girault＇s trusted level 3 as in traditional public key infrastructure-based cryp- tography. This certificateless encryption scheme has a shorter public key than other schemes in the stan- dard model.

关 键 词：certificateless cryptography malicious key generation center key replacement attack IND-CCA secure 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]