两种无证书签密方案的安全性分析  

Security Analysis of Two Certificateless Signcryption Schemes

作　　者：葛爱军[1] 陈少真[1] 

机构地区：[1]信息工程大学信息工程学院,河南郑州450002

出　　处：《信息工程大学学报》2010年第2期132-136,共5页Journal of Information Engineering University

基　　金：国家自然科学基金资助项目(60673081);国家863计划资助项目(2006AA01Z417)

摘　　要：签密能够在一个合理的逻辑步骤内同时完成数字签名和公钥加密两项功能,而其计算量和通信成本远远低于传统的先签名后加密。无证书密码体制消除了基于身份密码体制共有的密钥托管问题,同时不需要证书进行公钥的认证,没有证书管理带来的额外开销。如何设计高效的无证书签密方案已成为当前研究的热点问题,但是对其安全性讨论则较少。文章在随机预言模型下定义了无证书签密方案的安全模型。此外,通过对当前2种无证书签密方案进行分析,指出原方案存在的安全漏洞,并给出了具体的攻击方法。Signcryption is a new cryptographic primitive that performs signing and encryption in a logical single step,at a significantly lower cost and less calculation than the traditional signature-then-encryption approach.Certificateless public key cryptography eliminates the use of certificates in certificated public key cryptography and solves the key escrow problem in identity-based cryptography.The certificateless signcryption has developed quickly so far,but little attention has been paid to the security of concrete schemes.In this paper,we define the security model of the certificateless signcryption scheme in the random oral model.In addition,two certificateless signcryption schemes are analysed,and the original schemes are shown insecure with a specific attack method.

关 键 词：无证书密码 签密体制 安全模型 密文机密性 

分 类 号：O157.4[理学—数学]