对一个拥有RSA数字签名的零知识证明的分析

Security Analysis of a Zero-knowledge Proof Scheme Possessing a RSA digital Signature

目前拥有RSA数字签名的零知识证明的两个方案给出了防止RSA数字签名任意传播的一种新方法,但其中第一个方案并不是那样安全.文章指出在随机oracle模型下,当公钥的值较小时,一个不拥有RSA数字签名的证明者能够欺骗验证者.

WANG et al.recently proposed two zero-knowledge proof schemes of possessing a RSA digital signature.These schemes give a new method of preventing arbitrary propagation of digital signature.However,the security of the first WANG et al.'s schemes is not as secure as they have claimed.In the random oracle model,a prover without a RSA digital signature could cheat a verifier when the public key is small.