消息恢复签名方案的分析和改进  

Analysis and improvement of signature scheme with message recovery

作　　者：李晓雄[1] 左黎明[1] 汤鹏志[1] 

机构地区：[1]华东交通大学基础科学学院,南昌330013

出　　处：《计算机工程与应用》2012年第32期69-71,163,共4页Computer Engineering and Applications

基　　金：国家自然科学基金(No.11061014);江西省教育厅青年科学基金(No.GJJ10129);江西省教育厅科研项目(No.GJJ10708)

摘　　要：通过分析一个基于椭圆曲线的具有消息恢复的数字签名方案,发现原方案的消息恢复存在安全性的缺陷,并针对此问题给出了改进的方案,解决了任何人都能恢复消息的缺陷。介绍了基于椭圆曲线的具有消息恢复的数字签名方案的一种攻击方法:生日攻击。原方案在攻击者使用生日攻击对签名信息进行攻击使得密钥信息容易暴露,对原方案作了改进,使得改进后的方案完全能够抵抗生日攻击。The paper analyses a signature scheme with message recovery based on elliptic curves, and finds the orig- inal scheme is insecure in message recovery. An improved scheme is presented in this paper to solve the problem that anyone can restore original message. An attack, named birthday attack, to a signature scheme with message re- covery based on elliptic curves is introduced. When attackers use birthday attack to attack the signature information the secret key is easily exposed in original scheme, in this regard, an improved scheme is put forward and the new scheme can fully resist birthday attack.

关 键 词：数字签名 椭圆曲线 消息恢复 生日攻击 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]