一种基于离散对数问题的无证书代理签名方案

Certificateless Proxy Signature Scheme Based on Discrete Logarithm Problem

为解决代理签名方案中的证书管理或密钥托管问题,提出了一种新的无证书代理签名方案(CLPS)。该方案通过将2个部分私钥绑定相同的1个身份标识解决了密钥托管问题,同时满足代理签名所要求的所有性质。该方案的安全性基于离散对数问题,具有存在不可伪造性,能够有效抵抗Type-Ⅰ攻击者和Type-Ⅱ攻击者的攻击。与已有的CLPS相比,该方案没有使用双线性映射,且其代理密钥利用Schnorr短签名完成,安全性和效率都得到了提高。

To solve the problems of certificate management or key escrow in proxy signature schemes,a new certificateless proxy signature scheme（CLPS）is presented.This scheme solves the key escrow problem by binding two partially private keys with a same identity and also satisfies all the required characteristics of the proxy signature.Its security is based on the discrete logarithm problem（DLP）.It has existential unforgeability,effectively resisting the attack of Type-Ⅰ adversary and Type-Ⅱ adversary.Compared with the existed CLPS,the CLPS presented here doesn＇t use the bilinear pairing and its proxy keys use the Schnorr short signature,and its efficiency and security is improved.