一种可转换的认证加密方案

Convertible Authenticated Encryption Scheme

现有的认证加密方案只考虑了如何在验证消息的有效性时不使用Hash函数和消息冗余函数的情况,或只讨论在验证时签名的可转换性问题。针对这种情况,该文基于椭圆曲线密码体制设计了一个可转换的且不需要Hash函数和消息冗余函数的认证加密方案,而且方案中签名的转换过程不需要签名者的合作,并对该方案进行了性能分析。

All the existed authenticated encryption schemes either have only considered the process of authenticated signature without using Hash functions and redundancy functions or have only discussed the signature＇s convertibility. So it proposes a new convertible authenticated encryption scheme without using Hash functions and redundancy functions which are based on ECC. The convert of signature in this scheme can be executed without signer. The scheme＇s security is analysed.