一种改进的基于身份和双线性对的环签名方案

Lin-Wu等人的使用双线性对构造的基于身份的环签名是不合理的,该文对Lin-Wu等人的签名方案进行修改,得到一个合理的使用双线性对构造的基于身份的环签名。     

An improved identity-based proxy ring signature scheme

Proxy ring signature schemes have been shown to be useful in various applications, such as electronic polling, electronic payment, etc. In this paper, we point out that Lang‘s scheme is unreasonable and propose an improved Identity-based proxy ring scheme from bilinear pairings which is reasonable and overcomes the deficiencies of Lang‘s scheme. Our scheme can prevent the original signer from generating the proxy ring signature, thus the profits of the proxy signer are guaranteed. In addition, our scheme satisfies all the security requirements of proxy ring signature, I.e. Signer-ambiguity, non-forgeability, verification, non-deniability and distinguishability. As compared with Zhang‘s scheme, our scheme is a computational efficiency improvement for signature verification because the computational cost of bilinear pairings required is reduced from O(n) to O(1).     

一种无证书的顺序聚合签名方案

已有的聚合签名方案的部分密钥提取过程中存在被敌手伪造的问题。文章基于双线性映射提出了一种新的无证书的顺序聚合签名方案,并将自认证方案与聚合签名方案相结合,从而保证了部分密钥的安全,同时对聚合签名方案过程中的签名算法进行改进以提高性能。结果表明,与聚合签名方案相比,新顺序聚合签名可以改善方案的整体效率。在随机预言模型下证明了该方案可以防止攻击者的伪造。     

一种无证书强代理签名方案的设计

对某高效无证书代理签名方案进行分析,发现该方案达不到其声称的高效率,而且存在安全隐患.为进一步提高无证书代理签名方案的效率,利用双线性对构造了一个新的无证书代理签名方案,其安全性基于Diffie-Hellman困难问题,证明了新方案满足代理签名的安全性要求,且该方案比前述某高效无证书代理签名方案更为高效.     

Feasibility analysis of two identity-based proxy ring signature schemes

Recently, proxy ring signature schemes have been shown to be useful in various applications, such as electronic polling, electronic payment, etc. Although many proxy ring signature schemes have been pro-posed, there are only two identity-based proxy ring signature schemes have been proposed until now, i. e., Cheng＇s scheme and Lang＇s scheme. It＇s unlucky that the two identity-based proxy ring signature schemes are unfeasible. This paper points out the reasons why the two identity-based proxy ring signature schemes are unfeasible. In order to design feasible and efficient identity-based proxy ring signature schemes from bilinear pairings, we have to search for other methods.     

一种新的前向安全无证书签名方案的设计

针对无证书签名的密钥泄露问题研究出一种新的前向安全无证书签名方案。本方案主要通过定期更新用户的秘密值来提高前向安全性,与此同时保留了 KGC 文件生成用户公开公钥的特点来避免不诚实 KGC 文件中公钥与攻击替换的可能。在安全性分析中可见,该技术具备了较好的前向安全性,可有效辨别 KGC 文件的不诚实性行为,并防御不诚实 KGC 文件下的公钥替换攻击。     

Efficient ID-Based Proxy Blind Signature Scheme

0 Introduction Ablind signature, primitively introduced by Chaum[1], plays a central role in cryptographic protocols such as e-voting,e-payment that require user anonym- ity[2,3]. Such a signature allows a user to obtain a signa- ture of a message in a wa…     

对无证书部分盲签名方案的分析与改进

目的 研究了几个无证书的部分盲签名方案,对其中的一个签名方案分析发现其存在严重的安全缺陷,并对出现伪造攻击的原因进行分析.方法 在签名阶段加入公共信息,并在签名时改变签名的形式.结果与结论 分析表明,改进方案不仅满足部分盲性,而且可以防止对公共信息的更改,并在随机预言模型下证明新方案是不可伪造的.     

Provable Efficient Certificateless Group Key Exchange Protocol

Certificateless public key cryptography （CL-PKC） avoids the inherent escrow of identity-based cryptography and does not require certificates to guarantee the authenticity of public keys. Based on CL-PKC, we present an efficient constant-round group key exchange protocol, which is provably secure under the intractability of computation Diffie-Hellman problem. Our protocol is a contributory key exchange with perfect forward secrecy and has only two communication rounds. So it is more efficient than other protocols. Moreover, our protocol provides a method to design efficient constant-round group key exchange protocols and most secret sharing schemes could be adopted to construct our protocol.     

A certificateless threshold public key encryption scheme

The decryption participant’s private key share for decryption is delegated by key generation center in the threshold IBE scheme.However,a key generation center which is absolutely trustworthy does not exist.So the author presents a certificateless threshold public key encryption scheme.Collaborating with an administrator,the decryption participant generates his whole private key share for decryption in the scheme.The administrator does not know the decryption participant’s private key share for decryption.Making use of q-SDH assumption,the author constructs a certificateless threshold public key encryption scheme.The security of the scheme is eventually reduced to the solving of Decisional Bilinear Diffie-Hellman problem.Moreover,the scheme is secure under the chosen ciphertext attack in the standard model.     

无证书的XML多重签名

针对XML电子公文流转系统中公文审批存在多重签名的需求,构建了两种新的XML多重签名研究模型.基于相应的研究模型,提出了一种无证书的XML有序多重签名方案和无证书的XML广播多重签名方案,以解决传统签名在此类应用中存在的签名效率低、可扩展性差等问题.同时分析了两种方案的正确性、在随机预言模型下的不可伪造性,而且无证书的XML有序多重签名方案,克服了已有方案相邻成员可以擅自交换签名顺序的缺点.最后,按照XML数字签名规范化要求,对多重签名的实现过程进行了设计,为XML多重签名在电子政务中的应用提供了可行的解决途径.     

A New ID-Based Proxy Blind Signature Scheme

An identity-based proxy blind signature scheme from bilinear pairings is introduced, which combines the advantages of proxy signature and blind signature. Furthermore, our scheme can prevent the original signer from generating the proxy blind signature, thus the profits of the proxy signer are guaranteed. We introduce bilinear pairings to minimize computational overhead and to improve the related performance of our scheme. In addition, the proxy blind signature presented is non-repudiable and it fulfills perfectly the security requirements of a proxy blind signature.     

An attribute-based ring signature scheme in lattice

An attribute-based ring signature scheme in lattice was proposed in this paper. In this signature scheme, an entity’s attributes correspond to the columns of a lattice matrix, and the signature was generated by using a subset of these attributes. The entities possessing these attributes form a ring. The scheme is computationally efficient than the schemes based on the integer factor problem and discrete logarithm problem, furthermore it is still secure in quantum computing environment.     

An efficient certificateless aggregate signature scheme

Aggregate signature can aggregate n signatures on n messages from n signers into a single signature that convinces any verifier that n signers sign the n messages, respectively. In this paper, by combining certificateless public key cryptography and aggregate signatures, we propose an efficient certificateless aggregate signature scheme and prove its security. The new scheme is proved secure against the two representative types adversaries in certificateless aggregate signature under the assumption that computational Diffie-Hellman problem is hard. Furthermore, from the comparison of the computation cost of the new scheme with some existing certificateless aggregate signature schemes in group sum computation, scalar multiplication computation, Hash computation and abilinear pairings computation, it concludes that the new scheme reduces the computation cost in scalar multiplication computation in half and maintains the same in the other computation costs.     

公开可验证的短签名方案

对Du等提出的无证书、短签名方案进行分析与改进,设计了一个将双线性映射和密钥交换技巧有效结合起来的数字签名方案.该方案的一个重要特性就是对秘密信息有效性的公开验证,同时保持了原方案的短签名等特点,在公开且低带宽的通信环境下更适于应用.     

An efficient identity-based anonymous signcryption scheme

Signcryption is a cryptographic primitive that performs encryption and signature in a single logical step more efficiently than sign-then-encrypt approach. Till now, various kinds of signcryption schemes have been proposed. Among them, the requirement of signcrypter＇s privacy protection is needful in some practical applications. In this paper, a new identity-based anonymous signcryption scheme from hilinear pairings, which is the organic combination of identity-based ring signature and encryption scheme, is proposed. The proposed scheme is indistinguishable against the chosen ciphertext attack under the Decisional Bilinear Diffie-Hellman assumption in the random oracle model. Its unforgeability relies on the computational Diffieellman problem. Compared with the previous schemes, the new scheme is more efficient in computation.     

一种基于双线性对的门限签名方案

通过对现有门限签名方案的分析,发现很多门限签名方案存在安全上的缺陷,特别是在抵抗内部恶意成员的攻击方面.使用双线性映射工具,提出基于双线性对的门限签名方案.该方案通过可验证的方法来防止秘密分发者和秘密共享者的欺骗行为,利用可信中心参与和增加签名者的身份信息来阻止抵抗群体内部成员的合谋攻击,克服了门限签名方案上的弱点.同其他方法进行分析对比,结果表明,该方案还具有验证简单,个体密钥能重复使用,效率高,安全性强的特点.     

利用可链接环签名的电子现金支付方案

利用可链接的环签名协议,设计了一种电子现金支付方案.欲在某商家消费电子现金的用户须事先在该商家注册形成用户团,这样便于管理,且用户消费时在合法的电子现金中加上一个环签名,从而实现重复花费的事前检测,降低了损失和纠纷.     

一种基于身份的代理多重签名方案

结合基于身份的密码体制和代理多重签名，使用双线性映射，构造了一种基于身份的代理多重签名方案．分析表明，该方案可有效地抵御对代理签名的伪造攻击，满足代理签名所要求的安全特性．     

有效的动态群签名方案

引入了动态群签名的概念,动态群签名是可以灵活地增删群成员的群签名．接着又提出了一个有效且安全的动态群签名方案。新提出的动态群签名方案的签名长度,以及签名与验证的工作量均独立于群成员与已删除群成员的人数．