Abstract: The certificate-based public key cryptography is proposed by Gentry in Eurocrypt 2003，which can overcome the certificate management problem in traditional public key system，as well as the private key escrow problem in identity-based public key system.Based on computational Diffie-Hellman assumption，a Shnorr-type certificate-based signature scheme is constructed，which is provable under the Random Oracle Model.This scheme doesn’t need any computation of the bilinear pairing in signing algorithm，and just only need one computation of the bilinear pairing in verification algorithm.So it is more efficient than the available certificate-based signature schemes.

Key words: cryptography, signature, certificate-based signature, provably secure

摘要： 基于证书公钥密码学是Gentry在Eurocrypt 2003上首次提出的，它克服了传统公钥系统中存在的证书管理问题和基于身份公钥系统中存在的密钥托管问题。基于计算性Diffie-Hellman假设，构造一个Shnorr型的高效的基于证书数字签名方案，并在随机预言机模型（Random Oracle Model）下证明其安全性。该方案在签名算法中不需要任何双线性对运算，在签名验证算法中只需要一个双线性对运算，在效率上优于已有的基于证书数字签名方案。

关键词: 密码学, 数字签名, 基于证书数字签名, 可证明安全