对一种无证书聚合签名方案的攻击与改进

发布时间：2018-04-02 08:27

本文选题：无证书　切入点：聚合签名　出处：《河南师范大学学报(自然科学版)》2017年01期

【摘要】：无证书聚合签名方案能够有效提高签名验证阶段的效率,其存在两类攻击,在类型I攻击中,攻击者不知道系统主密钥和用户的部分私钥,但能替换用户的公钥;在类型II攻击中,攻击者知道系统主密钥和用户的部分私钥,但不能替换用户公钥.无证书聚合签名方案只有同时能够抵抗这两类攻击,才能说明方案是安全的.大多数无证书聚合签名方案在随机预言机模型下证明了其安全性,但是有些方案不能抵抗类型II攻击.以陈提出的无证书聚合签名方案为例,给出一种适用于一些无证书聚合签名方案的对应攻击方法.攻击者在拥有系统主密钥的情况下,根据两个有效的签名可以伪造出任意一个消息的有效签名.在此基础上提出了一个改进的无证书聚合签名方案,并在随机预言机模型下证明了新方案针对类型I攻击和类型II类攻击是存在性不可伪造的.
[Abstract]:Certificateless aggregate signature scheme can effectively improve the efficiency of the signature verification stage, the existence of two types of attacks in a I attack, the attacker does not know the private key system part of the master key and the user, but can replace the public key of the user; in type II attack, the attacker knows the master key system part of the private key and the user, but not replace the user public key. The certificateless aggregate signature scheme only at the same time can resist these two attacks, in order to explain the scheme is secure. Most of certificateless aggregate signature scheme proved its security in the random oracle model, but some scheme can not resist the II attack. The type of certificateless aggregate signature scheme proposed by Chen as an example that gives a corresponding attack methods applicable in some certificateless aggregate signature scheme. The attacker with the master key case, according to the two valid signatures can be forged as A valid signature of message is proposed. Based on this, an improved certificateless aggregate signature scheme is proposed. Under the random oracle model, it is proved that the new scheme is non forgery for type I attacks and type II attacks.

【作者单位】：华东交通大学理学院;华东交通大学系统工程与密码学研究所;
【基金】：国家自然科学基金(11361024;11261019) 江西省自然科学基金项目(20151BAB201002) 江西省研究生创新专项资金项目(YC2015-S255)
【分类号】：TN918.4

【相似文献】