Anonymity and Certificateless Property Could Not Be Acquired Concurrently

Lihua Liu ； Zhenzhen Guo ； Zhengjun Cao ； Zhen Chen

《International Journal of Electronics and Information Engineering》 7卷2期 (2017/12) Pp. 61-67

https://doi.org/10.6636/IJEIE.201712.7(2).02

摘要

We show that the anonymous certificateless authentication scheme [IEEE TIFS, 9(12), 2014, 2327-2339] is very vulnerable to denial-of-service (DoS) attacks, because it does not develop a mechanism to help an application provider to verify the validity of a service request. A malicious attacker can launch massive requests without being detected. We would like to stress that anonymity and certificateless property could not be acquired concurrently. We think the availability should be put first above all else when one designs a cryptographic scheme.

關鍵字

Anonymity ； Availability ； Certificateless Cryptography ； Denial-of-service Attack