安全的无双线性映射的无证书签密机制  

Secure Certificateless Signcryption Scheme without Bilinear Pairing

作　　者：周彦伟[1,2] 杨波[1,2] 王青龙[3] ZHOU Yan-Wei YANG Bo WANG Qing-Long(School of Computer Science, Shaanxi Normal University, Xi＇an 710062, China School of Information Engineering, Chang＇an University, Xi＇an 710064, China State Key Laboratory of Information Security （Institute of Information Engineering, The Chinese Academy of Sciences）, Beijing 100093 China)

机构地区：[1]陕西师范大学计算机科学学院,陕西西安710062 [2]信息安全国家重点实验室(中国科学院信息工程研究所),北京100093 [3]长安大学信息工程学院,陕西西安710064

出　　处：《软件学报》2017年第10期2757-2768,共12页Journal of Software

基　　金：国家自然科学基金(61572303;61772326);国家重点研发计划"网络空间安全"重点专项(2017YFB0802003;2017YFB0802004);"十三五"国家密码发展基金(MMJJ20170216);中国科学院信息工程研究所信息安全国家重点实验室开放课题(2017-MS-03);中央高校基本科研业务费项目(GK201702004)~~

摘　　要：无证书签密是能够同时提供无证书加密和无证书签名的一种非常重要的密码学原语.近年来,多个无证书签密方案相继被提出,并声称他们的方案是可证明安全的.但是,通过给出具体的攻击方法,指出现有的一些无证书签密机制并不具备其所声称的安全性.针对上述问题,提出一种无双线性映射的高效无证书签密方案,并在随机谕言机模型下,基于计算性Diffie-Hellman问题和离散对数问题对所提方案的安全性进行了证明.同时,该方案还具有不可否认性和公开验证性等安全属性.与其他传统无证书签密方案相比,由于未使用双线性映射运算,在具有更高计算效率的同时,该方案的安全性更优.Certificateless signcryption is a useful cryptographic primitive which simultaneously provides the functionalities of certificateless eneryption and certificateless signature. In the past few years, some certifieateless signcryption schemes have been proposed, and claimed to be provably secure. Unfortunately, concrete attacks can be made that indicate that some existing certificateless signcryption schemes are not secure. To overcome these disadvantages, an efficient certificateless signcryption scheme without bilinear pairings is proposed. The proposal is provably secure in the random oracle model based on the computational Diffie-Hellman problem and discrete logarithm problem, and also has the security properties such as non-repudiation and public verifiability. Additionally, compared with other existing certificateless signcryption schemes in the computational complexity, the proposed method is more efficient and secure due to the lack of bilinear pairings.

关 键 词：无证书签密 随机谕言机 无双线性映射 可证明安全性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]