基于身份的多接收者匿名签密改进方案  

Improved identity based multi-receiver anonymous signcryption scheme

作　　者：张波[1,2,3] 孙涛 于代荣[1,2] 

机构地区：[1]济南大学信息科学与工程学院,山东济南250022 [2]山东省网络环境智能计算技术重点实验室,山东济南250022 [3]山东省软件工程重点实验室,山东济南250101

出　　处：《通信学报》2015年第9期109-118,共10页Journal on Communications

基　　金：山东省自然科学基金资助项目(ZR2014FL011;ZR2013FL003);山东省高等学校科技计划基金资助项目(J13LN21)~~

摘　　要：对庞等提出的首个考虑发送者和接收者双重匿名性的基于身份的多接收者匿名签密方案进行安全性分析,结果表明该方案不满足选择密文攻击下的密文不可区分性,在现有安全模型下,攻击者可以区分不同消息的签密密文。提出一个在随机预言模型下选定身份安全的改进方案,新方案在CDH和Gap-BDH困难问题假设下分别满足密文的存在不可伪造性和不可区分性。Recently, Pang, et al proposed a novel identity based multi-receiver anonymous signcryption scheme（IBMRASC）, which put into consideration both the sender＇s anonymity and the receiver＇s anonymity simultaneously. However, the analysis with respect to this scheme indicated that, under existing security models the adversary can distinguish the ciphertexts associated with different plaintexts. Therefore, Pang＇s approach did not satisfy the requirement of indistinguishability against chosen ciphertext attacks（CCA）. An improved scheme which is selective identity secure in the random oracle model was proposed. Under the CDH and Gap-BDH hard problem assumption, the improved scheme is both existentially unforgetable against chosen message attack and indistinguishable against adaptive CCA.

关 键 词：匿名性 多接收者签密 基于身份签密 随机预言 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]