Forgeability of Wang-Zhu-Feng-Yau’s Attribute-Based Signature with Policy-and-Endorsement Mechanism  

作　　者：葛爱军 黄欣沂 陈成 马传贵 张锐 

机构地区：[1]State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou Information Science and Technology Institute [2]State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences [3]Fujian Provincial Key Laboratory of Network Security and Cryptology, School of Mathematics and Computer Science,Fujian Normal University [4]Institute of Software, Chinese Academy of Sciences

出　　处：《Journal of Computer Science & Technology》2013年第4期743-748,共6页计算机科学技术学报（英文版）

基　　金：partially supported by the National High Technology Research and Development 863 Program of China underGrant No.2011AA010803;the National Natural Science Foundation of China under Grant Nos.61100225, 61202450;the funding of Science and Technology on Information Assurance Laboratory (KJ-13-02);the Key Scientific and Technological Project of Henan Province of China under Grant No. 122102210126

摘　　要：Recently, Wang et al. presented a new construction of attribute-based signature with policy-and-endorsement mechanism. The existential unforgeability of their scheme was claimed to be based on the strong Diffie-Hellman assumption in the random oracle model. Unfortunately, by carefully revisiting the design and security proof of Wang et alfs scheme, we show that their scheme cannot provide unforgeability, namely, a forger, whose attributes do not satisfy a given signing predicate, can also generate valid signatures. We also point out the flaws in Wang et al.＇s proof.Recently, Wang et al. presented a new construction of attribute-based signature with policy-and-endorsement mechanism. The existential unforgeability of their scheme was claimed to be based on the strong Diffie-Hellman assumption in the random oracle model. Unfortunately, by carefully revisiting the design and security proof of Wang et alfs scheme, we show that their scheme cannot provide unforgeability, namely, a forger, whose attributes do not satisfy a given signing predicate, can also generate valid signatures. We also point out the flaws in Wang et al.＇s proof.

关 键 词：attribute-based signature existential unforgeability policy-and-endorsement 

分 类 号：TN918.1[电子电信—通信与信息系统]