摘要
通过对无证书聚合签名方案进行安全性分析,发现此方案无法抵抗TypeⅡ下的伪造性攻击。针对此类问题,提出一个改进的方案。方案在签名过程中改变了参数的组合方式,在聚合签名验证中加强了对主密钥和公钥的约束。安全分析表明,在计算CDHP困难和随机谕言模型的假设下,方案在适应性选择消息攻击下具有不可伪造性。效率分析表明,该方案在签名与验证过程中,只需要4个双线性对运算,签名的长度是固定的,与同类安全的无证书聚合签名方案相比,效率较高。
The security analysis is proceeded by certificateless aggregation signature scheme,which can′t resist forgeable attack under TypeⅡ. To solve the problem,an improved scheme is proposed. Parameter combination mode is changed in the pro-cess of signature,the restrain of master key and public key is strengthened in aggregation signature verification. Security analy-sis shows that the scheme is unforgeable under attacking of adaptive selection message,base on difficult calculation of CDHP and random oracle model assumption. Efficiency analysis shows that in proceeding of signature and verification,the proposed scheme requires only 4 bilinear pairings calculation,the length of the signature is fixed,and the efficiency of certificateless ag-gregation signature scheme is higher than congener security schemes.
出处
《现代电子技术》
北大核心
2015年第9期83-86,共4页
Modern Electronics Technique
关键词
无证书密码体制
聚合签名
双线性对
随机谕言模型
certificateless cryptosystem
aggregation signature
bilinear pairing
random oracle model
