一种多方量子签名协议的安全性分析与改进

Security analysis and improvement of a multiparty quantum signature scheme

多方量子签名协议可以满足两人或多人共同为同一消息进行签名,保证协议在量子计算攻击下的安全性。最近,Vandani等提出了一种新型量子签名协议,该协议需要用户和认证机构共同生成最终签名,且不需要纠缠资源。然而,通过分析发现,协议的正确性和安全性存在问题,具体地,签名操作设计的不对易性会导致签名验证出现错误,且签名协议无法抵御验证者的伪造攻击。针对上述问题,本文利用增加对易操作、引入可信任第三方Trent等方法,给出了改进后的协议。分析表明,新协议既保证了多方签名协议的功能性需求,同时也可以抵抗原协议存在的验证者伪造攻击。

Multiparty quantum signature protocol can satisfy two or multi-user signature together and can resist quantum attacks and ensure the security of the scheme under quantum computing attack.Recently,Vandani et al.proposed a new quantum signature scheme,which needs the user and the certification authority to jointly generate the final signature and no entangled resources are required.However,the analysis shows that there are problems in the correctness and security of the scheme.Concretely,non-commutative of the signature operators design can lead to errors in signature verification,and the signature scheme cannot resist the forgery attack of the verifier.In view of the above problems,this paper gives an improved scheme by using the commutative operation and adding a trusted third-party Trent.The new scheme not only ensures the functional requirements of the multiparty quantum signature scheme,but also resists the forgery attack of the verifier.