具有前向安全性的无证书代理签名方案

The certificateless proxy signature scheme with the feature of forward secrecy

为了减少签名密钥泄露带来的损失,结合前向安全的思想,构造了一个新的密钥更新算法,并在该算法基础上提出了一个前向安全的无证书代理签名方案.新方案利用不断更新代理签名密钥的方法,保证了代理签名方案的前向安全性.即使代理签名者泄露了某时段的签名密钥,攻击者也不能伪造该时段以前的代理签名.同时利用哈希函数,将公钥与私钥绑定在一起,更好地抵抗了公钥替换攻击.

In order to reduce the loss of key exposure and combining the thought of forward signature, this paper constructed a new rekeyding algorithm, then proposed a forward secure Certificateless proxy Signature Scheme on the basis of the rekeyding algorithm. The new scheme is forward secure by regular updating the signature key . Even if the proxy signer reveals the signature key, an attacker could not forge the former proxy signature. For risist- ing public - key substitute attack beter, it maked use of hash function which binds user＇ s public key with his private key.