关于“两类ElGamal型数字签名方案的安全性和性能分析”的讨论

为了加强ElGamal型数字签名方案的安全性,最近祁明等人对两类ElGamal型数字签名方案的安全性和基于两类签名方案的通行字认证方案进行了分析和讨论,并且提出了两类改进型的方案.本文首先指出了他们提出的第一个p型方案是不安全的,攻击者可以伪造任意消息的数字签名.本文证明了广义ElGamal型数字签名方案都不能抵御代换攻击.本文最后还证明了他们提出的两类改进型方案也不能抵御同态攻击,因而并不具有所说的安全性.

DISCUSSION ON "SECURITY AND PERFORMANCE ANALYSIS OF TWO KINDS OF ELGAMAL SIGNATURE SCHEMES

Qi Ming and others recently analyzed and discussed the security of two kinds of the ElGamal signature schemes and the password authentication scheme based on two kinds of the signature schemes, and proposed two kinds of improved schemes. This paper first points out that the first p type signature scheme proposed by Qi is not secure, since attackers can forge signature for any message. Then this paper shows that the generalized ElGamal signature schemes can not resist the substitution attack. Finally this paper shows that two kinds of the improved schemes proposed by Qi can not resist the homomorphism attack, and does not have the security as Qi said.