两个无证书签名方案的分析与改进  

Cryptanalysis and Improvement of Two Certificateless Signature Schemes

作　　者：孙芳[1] 何俊杰[2] 祁传达[2] 

机构地区：[1]信阳师范学院计算机与信息技术学院,河南信阳464000 [2]信阳师范学院数学与信息科学学院,河南信阳464000

出　　处：《数学的实践与认识》2016年第7期139-143,共5页Mathematics in Practice and Theory

基　　金：国家自然科学基金(61272465);河南省自然科学基金(142400410486)

摘　　要：无证书密码体制结合了基于身份密码体制和传统公钥密码体制的优点,受到了密码和信息安全研究者的极大关注.对梁景玲等提出的消息可恢复的无证书签名方案和侯红霞等提出的无证书短签名方案进行安全性分析,发现两个方案都不能抵抗公钥替换攻击.通过修改签名者密钥生成算法,增加对用户公钥的有效性验证,提高了梁等方案的安全性.通过在签名阶段将用户公钥绑定进HaSh函数,弥补了侯等方案的安全缺陷.Certificateless cryptography has been a great attention of cryptography and information security researchers, which combines the advantages of identity-based cryptography （without certificate） and traditional public key cryptography （no escrow）. The certificateless signature scheme with message recovery proposed by Liang et al and the certificateless short signature scheme proposed by Hou et al was cryptanalysis, and the results show that they are both insecure under public key replacement attacks. The Liang et al.＇s scheme is improved by modifying the user key generation algorithm and increasing verification of the user＇s public key. The Hou et al.＇s scheme is improved by binding the user＇s public key to Hash function when signature is generated.

关 键 词：证书密码体制 短签名 双线性对 离散对数 消息恢复 公钥替换攻击 

分 类 号：TN918.4[电子电信—通信与信息系统]