强安全无证书签名方案的安全性分析和改进  

Security analysis and improvement of strongly secure certificate less signature scheme

作　　者：樊爱宛[1] 杨照峰[1] 谢丽明[2] 

机构地区：[1]平顶山学院软件学院,河南平顶山467002 [2]平顶山学院计算机科学与技术学院,河南平顶山467002

出　　处：《通信学报》2014年第5期118-123,共6页Journal on Communications

基　　金：河南省中青年骨干教师基金资助项目;河南省科技攻关计划基金资助项目(142102210224)~~

摘　　要：对王亚飞等人提出的强安全性无证书签名方案进行安全性分析,指出其方案难以抵抗不诚实KGC下的公钥替换攻击。针对此类问题,采用改变传统无证书算法顺序,以KGC公告板形式公开用户公钥,用户可以通过本地保存的私钥和公钥验证公钥的真实性,从而对KGC的行为进行约束。安全性分析表明,改进后的方案能够抵抗基于不诚实KGC安全级别下的公钥替换攻击,而且方案避开了无双线性对和逆运算,效率优于已有方案。By analyzing the security of strongly secure certificateless signature scheme proposed by Wang Yafei et al, the problem that the scheme could not resist public key replacement attack under dishonest KGC was pointed out. Aiming at this problem, the behavior of KGC was restrained by the change of traditional certificateless algorithm sequence KGC bulletin board where user public key make public, and verifiability of facticity of public key through the local private keys and public keys. The analysis of security shows that the improved scheme cannot only resist the public key replacement attack based on dishonest KGC, but also be more efficient than the existing schemes for avoiding pairings and inverse operation.

关 键 词：无证书签名 公钥替换攻击 双线性对 离散对数问题 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]