2个基于身份代理签名方案的安全性分析及改进  

Cryptanalysis and Improvement of Two Identity-Based Proxy Signature Schemes

作　　者：吴晨煌[1] 李天旭[1] 陈智雄[1,2] 

机构地区：[1]莆田学院数学与应用数学系,福建莆田351100 [2]福建师范大学网络安全与密码重点实验室,福建福州350007

出　　处：《云南民族大学学报（自然科学版）》2012年第4期292-294,共3页Journal of Yunnan Minzu University:Natural Sciences Edition

基　　金：国家自然科学基金(61170246);福建省高校服务海西建设重点项目(2008HX03)

摘　　要：通过对向新银等提出的强指定验证人代理签名方案进行分析,指出该签名方案存在安全缺陷,即代理签名人能够得到原始签名人的私钥,从而代理签名人能做原始签名人所能做的任何事情.同样的安全缺陷还存在于张学军等给出的基于身份无可信中心的代理签名方案中.最后,对该签名方案进行了改进,改进后的签名方案的安全性是基于CDH问题的.A new identity -based strong designated verifier signature scheme, which is proposed by Xiang Xinyin, etc. , is analyzed and a serious security flaw is discovered in their scheme, because the private key of the original signer can be recovered by the proxy signer. Therefore, the proxy signer can do what the original signer can do. Unfortunately, the same security flaw is also found in a new identity -based proxy signature scheme without trusted PKG proposed by Zhang Xue-jun. Finally, an improved scheme is proposed, whose security is based on the CDHP.

关 键 词：基于身份 代理签名 强指定验证人 CDH问题 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]