具有前向安全性的可公开验证的签密方案  

Signcryption scheme with public verifiability and forward security

作　　者：戚明平 陈建华[1] 何德彪[1] 

机构地区：[1]武汉大学数学与统计学院,武汉430072

出　　处：《计算机应用研究》2014年第10期3093-3094,共2页Application Research of Computers

摘　　要：已有签密方案大多数不能同时提供可公开验证性和前向安全性。针对此问题,基于求解Zp上离散对数问题的困难性和单向hash函数的不可逆性,给出了一个同时具有前向安全性和可公开验证的签密方案。在该方案中验证不需要接收者的私钥,传输中通过将某一参数隐藏在指数位置,使得到发送者私钥的攻击者不可能得到本次及以前通信者的秘密信息。通过这些方法实现了可公开验证性和前向安全性,弥补了大多数已有签密方案不能同时提供可公开验证性和前向安全性的不足,而且在该方案中认证与消息恢复并未分离,但是在公开验证过程中却无须破坏消息的机密性,这使得本方案具有更高的安全性和更广泛的应用性。Most of existing schemes can＇ t simultaneously provide with public verifiability and forward security. To solve this problem, based on the difficulties of discrete logarithm problem on the cyclic group Zv and the intractability of reversing a one--way hash function, this paper presented a public verifiable signcryption scheme with forward security. In this scheme, the verification process didn＇t need the sender＇s private key, in the transmission, a parameter （r） was hided in the index of g, so attacked who obtained the sender＇ s private key couldn＇ t get any secret information between these participates before this communication. By these methods the scheme achieved public verifiability and forward security and made up the short coming of most existing schemes that can＇ t simultaneously provide with public verifiability and forward security. And furthermore, au- thentication and message recovery was not separated, but in the process of public verify, the message confidentiality won＇ t be damaged, this made the scheme have higher security and more widely applications.

关 键 词：认证加密 签名 公开验证 机密性 离散对数问题 前向安全 第三方验证 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]