一类ELGamal数字签名方案的安全性分析

对一类原子原型的ELGamal签名变形方案进行有效的存在性伪造攻击,指出该类方案在实用中不可取.根据方案中是否应用杂凑函数将ELGamal签名体制分为两类,深入探讨了杂凑函数在签名中的作用.综述了基于ELGamal签名体制的可证明安全的一般方法,指出对基于ELGamal签名体制的实用签名方案的改进,应规定在带杂凑函数的三元组ELGamal签名方案中.

Analysis on the Security of ElGamal Signature Scheme

Existential forgery attack was effectively applied to a type of primitive ElGamal signature in the paper. It points out this type of scheme is not adoptable in the practice. According to whether applied hash function in the scheme, ElGamal signature scheme was divided into two types and the function of hash function in the signature scheme was profoundly analysed. The paper summarized the general method of provably secure, and pointed out improvability on all practical signature base on ElGamal scheme should be limited to the triplet ElGamal-family signatures with hash function.