破解新型的轻量级数字签名方案

Breaking novel and lightweight digital signature scheme

由于RSA、ECC签名方案计算效率低,不适用于无线传感器网络、低廉智能卡、无线射频RFID等特殊应用领域。为设计适用于计算能力有限的小计算设备上的签名方案,Wang等人结合散列认证技术,提出了一种新型的轻量级数字签名方案。针对该新型轻量级数字签名方案,给出了由签名公钥求解其等价签名私钥的多项式时间算法。使用等价签名私钥,对手可以对任意消息伪造签名,从而破解了他们结合散列认证技术提出的数字签名方案。

The signature schemes based on RSA and ECC do not seem suitable for special application area such as wire- less sensor network, smart card and wireless RFID sidce they suffer from low computing efficiency. In order to design a scheme for small computing devices with limited computing capacity, Wang et al. proposed a novel lightweight digital signature scheme based on the hash authentication technology. A polynomial time algorithm, which found an equivalent signing secret key from the public key, was presented for this novel lightweight digital signature scheme. By using the equivalent secret key, adversary can forge signature for arbitrary messages. Hence, their digital signature scheme based on hash authentication is broken.