| 无证书聚合签名方案的安全性分析和改进 |
| |
| 引用本文： | 张玉磊,李臣意,王彩芬,张永洁.无证书聚合签名方案的安全性分析和改进[J].电子与信息学报,2015,37(8):1994-1999. |
| |
| 作者姓名： | 张玉磊 李臣意 王彩芬 张永洁 |
| |
| 作者单位： | 1.(西北师范大学计算机科学与工程学院 兰州 730070) ②(甘肃卫生职业学院 兰州 730000) |
| |
| 基金项目： | 国家自然科学基金(61163038, 61262056, 61262057)，甘肃省高等学校科研项目(2013A-014)和西北师范大学青年教师科研能力提升计划项目(NWNU-LKQN-12-32) |
| |
| 摘 要： | 该文分析了He等人(2014)提出的无证书签名方案和Ming等人(2014)提出的无证书聚合签名方案的安全性，指出Ming方案存在密钥生成中心(KGC)被动攻击，He方案存在KGC被动攻击和KGC主动攻击。该文描述了KGC对两个方案的攻击过程，分析了两个方案存在KGC攻击的原因，最后对Ming方案提出了两类改进。改进方案不仅克服了原方案的安全性问题，同时也保持了原方案聚合签名长度固定的优势。
|
| 关 键 词： | 密码学 聚合签名 无证书签名 密钥生成中心攻击 选择消息攻击 计算Diffie-Hellman 困难问题 |
| 收稿时间： | 2014-12-25 |
Security Analysis and Improvements of Certificateless Aggregate Signature Schemes |
| |
| Zhang Yu-lei,Li Chen-yi,Wang Cai-fen,Zhang Yong-jie.Security Analysis and Improvements of Certificateless Aggregate Signature Schemes[J].Journal of Electronics & Information Technology,2015,37(8):1994-1999. |
| |
| Authors: | Zhang Yu-lei Li Chen-yi Wang Cai-fen Zhang Yong-jie |
| |
| Affiliation: | 1.(College of Computer Science and Engineering, Northwest Normal University, Lanzhou 730070, China)2.(Gansu Health Vocational College, Lanzhou 730000, China) |
| |
| Abstract: | The security of certificateless signature scheme which was proposed by He et al. (2014) is analyzed, and the security of the certificateless aggregate signature scheme which was proposed by Ming et al. (2014) is analyzed too. It is pointed out that the Key Generation Center (KGC) can realize the passive attacks in the Mings scheme. It is also pointed out that KGC can realize the passive attack and initiative attack respectively in the Nimgs scheme. The processes of concrete forgery attacks which perfored by KGC are shown, and the possible reasons are analyzed. Finally, two improved Mings schemes are proposed. The improved schemes not only overcome the security problem of original scheme but also have an advantage that the length of aggregated signature is fixed. |
| |
| Keywords: | |
| 本文献已被 万方数据 等数据库收录！ |
| 点击此处可从《电子与信息学报》浏览原始摘要信息 |
|
点击此处可从《电子与信息学报》下载全文 |
