一个高效的无证书签名方案分析与改进

Analysis and Improvement of an Efficient Certificateless Signature Scheme

对一种基于双线性对的高效无证书签名方案进行安全性分析,表明该方案对于公钥替换攻击和恶意的密钥生成中心攻击是不安全的。提出了一种可避免这些攻击的改进方案。在随机预言机模型、离散对数问题和计算Diffie-Hellman问题困难性假设下,证明了改进方案可以抵抗自适应选择消息攻击的存在性伪造。与其他基于双线性对的无证书签名方案相比,改进方案具有较高的计算效率。

Security analysis of an efficient certificateless signature scheme based on bilinear pairing shows that the scheme is insecure against public key replacement attack and malicious key generation center( KGC)attack. An improved scheme to avoid these attacks was proposed. The scheme was proved that the existential forgery of an adaptive chosen message attacks can be resisted in the random oracle model,the assumption of discrete logarithm problem( DLP) and computational Diffie-Hellman problem( CDHP). Compared with other certificateless signature schemes based on bilinear pairing,the improved scheme has better computational efficiency.