基于RSA的前向安全的数字签名

前向安全的数字签名的思想就是为了把签名密钥泄漏所带来的损失减小到最小程度。为了达到真正的前向安全,不仅要求签名密钥是前向安全的,同时还要保证签名也是前向安全的。文章提出了一个基于RSA的前向安全数字签名方案,该方案的公钥固定不变,签名密钥定期更新,每次签名用阶段性签名密钥签名,签名的正确性用系统公钥来验证,验证方程中包含了签名时间段的信息。该方案保证即使当前的签名密钥泄漏,攻击者也无法伪造前阶段的签名密钥和前阶段的签名。

A Forward Security Digital Signature Scheme Based on RSA

The idea of forward security digital signature is to reduce the loss of the key leakage to the lowest degree.For achieving the really forward security,not only need the secret key of signature forward security,but also guarantee the signature forward security.In this paper,a forward security digital signature scheme based on RSA is proposed.In the proposed scheme,the secret key is refreshed automatically with different period time while the public key is fixed in the whole lifetime.In different period time,the different period signature secret key is adopted;the validity of signature is verified by using the system public key.At the same time,the information of the signature's time period is embodied into the equation of verification.Even if the secret key of current time period is compromised,the attacker can't forge the secret key and the signature of the past period time.