Cryptanalysis of two certificateless signature schemes

Computer Engineering and Applications ›› 2011, Vol. 47 ›› Issue (5): 98-100.

• 网络、通信、安全 • Previous Articles Next Articles

Cryptanalysis of two certificateless signature schemes

LI Bingfang^1，2，RU Xiujuan³，ZHANG Shanshan⁴

1.Department of Basic Course，Shaanxi Railway Institute，Weinan，Shaanxi 714000，China
2.School of Communication and Engineering，Xidian University，Xi’an 710071，China
3.Department of Computer，Kaifeng University，Kaifeng，Henan 475004，China
4.Department of Mathematics，Baoji University of Arts and Sciences，Baoji，Shaanxi 721007，China

Received:1900-01-01 Revised:1900-01-01 Online:2011-02-11 Published:2011-02-11

对两类无证书签名方案的密码学分析

李兵方^1，2，茹秀娟³，张姗姗⁴

1.陕西铁路工程职业技术学院基础课部，陕西渭南 714000
2.西安电子科技大学通信工程学院，西安 710071
3.开封大学公共计算机教研部，河南开封 475004
4.宝鸡文理学院数学系，陕西宝鸡 721007

Abstract

Abstract: A certificateless signature scheme presented by Xu et al and a certificateless proxy signature scheme presented by Fan et al are cryptanalyzed.It is showd that Xu et al’s scheme is universally forgeable，and in Fan et al’s scheme，an original signer disclosed his private key when he delegates his signing ability to a proxy signer.Furthermore，Fan et al’s scheme cannot resist a public-key replacement attack.The attack shows that anyone who replaces an original signer’s public key and a proxy signer’s public key can forge valid proxy signatures on behalf of the proxy signer without knowledge of the proxy signer’s proxy private key.

Key words: certificateless signature, proxy signature, public-key replacement attack

摘要： 对Xu等提出的无证书签名方案和Fan的无证书代理签名方案进行了安全性分析，指出Xu的签名方案是可以普遍伪造的。而Fan的代理签名方案中，原始签名人在授权过程中泄露了自己的私钥，且该代理签名不能抵抗公钥替换攻击，即任何人（没有代理私钥）只要替换了原始签名人和代理签名人的公钥就可以伪造代理签名人的代理签名。

关键词: 无证书签名, 代理签名, 公钥替换攻击

LI Bingfang^1，2，RU Xiujuan³，ZHANG Shanshan⁴. Cryptanalysis of two certificateless signature schemes[J]. Computer Engineering and Applications, 2011, 47(5): 98-100.

李兵方^1，2，茹秀娟³，张姗姗⁴. 对两类无证书签名方案的密码学分析[J]. 计算机工程与应用, 2011, 47(5): 98-100.

[1]	GE Lixia1, LI Xiao1, HE Mingxing2, LI Yarong1, LIU Xiaojian2. Improved certificateless proxy signature scheme [J]. Computer Engineering and Applications, 2017, 53(8): 92-94.
[2]	TIAN Juanhong, ZHANG Jianzhong, LI Yanping. Robust multi-proxy multi-blind signature scheme [J]. Computer Engineering and Applications, 2017, 53(1): 130-133.
[3]	ZOU Changzhi. Identity-based multi-proxy signature without bilinear pairings [J]. Computer Engineering and Applications, 2016, 52(9): 96-101.
[4]	MI Junli1, ZHANG Jianzhong2, CHEN Shouting1, LIU Fenghua1. Leakage-resilient designated verifier blind proxy signature scheme [J]. Computer Engineering and Applications, 2016, 52(22): 123-126.
[5]	LI Yarong1, LI Xiao1, HE Mingxing2, LIU Xiaojian2, GE Lixia1. Security analysis and improvement of forward secure proxy signature scheme [J]. Computer Engineering and Applications, 2016, 52(14): 110-114.
[6]	CAO Xin, WEI Shimin, ZHUO Zepeng. Security analysis of three forward secure proxy signature schemes [J]. Computer Engineering and Applications, 2015, 51(7): 98-100.
[7]	YU Jing1, LI Zhihui2. Threshold proxy multi-signature scheme [J]. Computer Engineering and Applications, 2015, 51(6): 69-71.
[8]	LIU Xiaohong, ZHANG Jianzhong. Analysis and improvement of certificateless proxy signature scheme [J]. Computer Engineering and Applications, 2014, 50(22): 115-117.
[9]	CHEN Lin. Cryptanalysis and improvement for two certificateless proxy signature schemes [J]. Computer Engineering and Applications, 2013, 49(7): 85-88.
[10]	GE Rongliang, GAO Dezhi, LIANG Jingling, ZHANG Yun. Security analysis and improvement of certificateless signature scheme [J]. Computer Engineering and Applications, 2013, 49(5): 96-98.
[11]	YANG Li, ZHANG Jianzhong. Analysis and improvement of new proxy signature scheme [J]. Computer Engineering and Applications, 2013, 49(22): 100-103.
[12]	HUANG Meijuan, DU Hongzhen. Provable secure ID-based threshold proxy signature scheme [J]. Computer Engineering and Applications, 2013, 49(20): 77-81.
[13]	DENG Lunzhi, WU Yunshun. Efficient identity based proxy signature [J]. Computer Engineering and Applications, 2013, 49(14): 98-100.
[14]	YU Jing1, LI Zhihui2. Certificateless threshold proxy signature scheme [J]. Computer Engineering and Applications, 2013, 49(12): 74-76.
[15]	CAO Tianqing, ZHANG Jianzhong. New certificateless threshold proxy signature scheme [J]. Computer Engineering and Applications, 2012, 48(9): 57-59.

Cryptanalysis of two certificateless signature schemes

对两类无证书签名方案的密码学分析

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics