无证书签密机制的安全性分析与改进  

Security analysis and improvement of a certificateless signcryption scheme

作　　者：赵振国[1] 

机构地区：[1]华北水利水电大学水利学院,河南郑州450045

出　　处：《通信学报》2015年第3期125-130,共6页Journal on Communications

基　　金："十二五"国家科技支撑计划基金资助项目(2011BAD25B01);华北水利水电大学高层次人才引进基金资助项目(NCWU201248);河南省教育厅科学技术重点研究基金资助项目(13A570704)~~

摘　　要：为了解决传统公钥密码体制中的证书管理问题和身份基公钥密码体制中的密钥托管问题,Al-Riyami和Paterson提出了无证书公钥密码体制。最近朱辉等提出了一个不含双线性对运算的无证书签密机制。然而,通过对其进行分析,发现该机制是不安全的(即不能提供保密性和不可伪造性),并给出了具体的攻击方法。为了增强安全性,提出了一个更安全的无证书签密机制,并在随机预言模型下基于离散对数问题和计算性Diffie-Hellman问题给出了安全性证明。此外,新机制具有良好的性能,签密算法只需要4个模幂运算,解密验证算法只需要5个模幂运算。To solve the certificate management problem in the traditional public key cryptography and the key escrow problem in the identity-based public key cryptography, Al-Riyami and Paterson proposed the concept of the certificateless public key cryptography. Recently, Zhu et al. proposed a certificateless signcryption without bilinear pairings. However, their scheme was completely insecure against with two concrete attacks. A strongly secure certificateless signcryption without bilinear pairings was also proposed, which was provably secure in the random oracle model under the assumption that the discrete logarithm problem and the computational Diffie-Hellman problems were intractable. Furthermore, the efficiency of the proposed scheme is very high since only four modular exponentiations and five modular exponentiations are needed in the signcryption algoriahm and unsigncryption algorithm separately.

关 键 词：签密 无证书 随机预言模型 双线性对 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]