Schnorr签名方案的两种伪签名算法及其安全性分析

Two Counterfeiting Signature for Schnorr Signature Scheme and the Analysis of its Security

介绍了ElGamal数字签名方案的一个变种——Schnorr签名方案,该方案具有随机性,初始化过程简单,签名算法计算量小,速度快,能检测和防止签名者伪造签名,具有较低的通信成本.在密码卡中具有大量的应用.本文给出了选择消息下对Schnorr签名方案的两种伪签名算法,其一是攻击者假冒签名者进行签名;其二是给出了一种私钥攻击方法,其攻击性不依赖于离散对数的求解问题,最后对整个签名系统的安全性进行了评估和分析.

Schnorr signature system is uncertain. The parameters of the Schnorr signature system arerandomly selected, moreover, the initial stage of the schemes is simple, and have lower communication costs than other digital signature scheme. This paper introduces a kind of arithmetic of counterfeiting signature, akey-recovery attack against the Schnorr signature algorithm under the chosen messages. All the attack actions do not depend on the computation of discrete logarithm. At the end, we analyze the security of the whole signature system.