首页 | 官方网站   微博 | 高级检索  
     

无证书签名方案的分析及改进
引用本文:葛荣亮,高德智,梁景玲,张云.无证书签名方案的分析及改进[J].计算机工程与应用,2013,49(5).
作者姓名:葛荣亮  高德智  梁景玲  张云
作者单位:山东科技大学信息科学与工程学院,山东青岛,266510
基金项目:青岛市科技发展计划项目(No.11-2-4-6-
摘    要:对一个无证书签名方案进行安全性分析,指出该方案不能抵抗公钥替换攻击和恶意的KGC攻击,即攻击者可以通过替换签名者的公钥来伪造任意消息的签名,恶意的KGC(Key Generation Center)可以获取用户的私钥。分析结果显示该方案不能满足无证书签名方案的安全性要求,同时为了应对这两种攻击,提出了改进的方案。

关 键 词:无证书签名  公钥替换攻击  恶意密钥生成中心(KGC)攻击  双线性对

Security analysis and improvement of certificateless signature scheme
GE Rongliang , GAO Dezhi , LIANG Jingling , ZHANG Yun.Security analysis and improvement of certificateless signature scheme[J].Computer Engineering and Applications,2013,49(5).
Authors:GE Rongliang  GAO Dezhi  LIANG Jingling  ZHANG Yun
Abstract:This paper analyzes a certificateless signature scheme,and points out the scheme can't resist to the public key replacement attack and the malicious KGC(Key Generation Center)attack.The attacker can forge the signature for any message by substituting the public key of the signer.The malicious KGC can get the private key.The analysis shows that the scheme can not satisfy the safety requirements of the certificateless signature.Meanwhile the improvement measure is proposed to resist these attacks.
Keywords:certificateless signature  public key replacement attack  malicious Key Generation Cente(rKGC)attack  bilinear pairing
本文献已被 万方数据 等数据库收录!
设为首页 | 免责声明 | 关于勤云 | 加入收藏

Copyright©北京勤云科技发展有限公司    京ICP备09084417号-23

京公网安备 11010802026262号