一个基于RSA的无证书多重签名方案

An RSA-based Certificateless Multi-signature Scheme

针对现有绝大部分多重签名方案基于双线性对构造导致的耗时问题以及基于身份的多重签名方案存在的密钥托管问题,在Zhang和Mao的无证书签名方案基础上提出一个基于RSA的无证书多重签名方案。该方案在运行效率上,只需要L+9个指数运算和5L+1个乘法运算,签名长度是(L+2)|n|,其中,L为签名者个数,|n|为系统参数n的比特长度;在安全性上,避免了密钥托管问题。此外,在随机预言机模型下,该方案被证明是安全的。

In order to improve the efficiency of existing multi-signature schemes based on bilinear pairings and relieve the inherent key escrow problems in the identity-based multi-signature scheme,an RSA-based certificateless multi-signature scheme was proposed,which was constructed on Zhang and Mao＇s certificateless signature scheme. In this scheme,only L ＋ 9 exponential operations 5L ＋ 1 multiplications are needed,and the signature length is（ L ＋ 2） ｜ n ｜,where L is the number of signers and ｜ n ｜ is the binary length of the system parameter n. The proposal is free of key escrow and secure in the random oracles model.