Schnorr签名方案的一种攻击

Cryptanalysis of Schnorr Signature Scheme

Schnorr签名算法计算量少,速度快,在灵巧卡中具有大量的应用,因此必须具有足够的安全性。本文给出了选择消息下对Schnorr签名方案的一种攻击方法,攻击者可以假冒签名者进行签名;另外给出了一种攻击签名者私钥的选择消息攻击方法,其攻击性不依赖于离散对数的求解问题。

Schnorr signature is widely used in smart card with little computation and high rate, so it should be enough secure. In this paper a method is presented to forge the signature of Schnorr signature scheme,and we also present a key-recovery attack against the Schnorr signature algorithm under the chosen messages. All the attack actions do not depend on the computation of discrete logarithm.