- 期刊
On the Security of a Certificateless Proxy Signature Scheme in the Standard Model
摘要
Certificateless cryptosystem can overcome the costly certificate management in the traditional public key cryptosystem, and meanwhile it does not have the private key escrow problem in the identity-based cryptosystem. Proxy signature can allow a proxy signer authorized by an original signer to sign messages on behalf of the latter. In this paper, we show that a recently proposed certificateless proxy signature scheme in the standard model is vulnerable to the public key replacement attack. Through this kind of attack, a malicious original signer or proxy signer can forge a valid proxy signature. We analyse the reasons for the success of the attack and point out the flaw in the proof of the original scheme.
延伸閱讀
- Lin, H. Y., Wu, T. S., & Huang, S. K. (2012). An Efficient Strong Designated Verifier Proxy Signature Scheme for Electronic Commerce. Journal of Information Science and Engineering, 28(4), 771-785. https://doi.org/10.6688/JISE.2012.28.4.9
- Xiong, H., Qin, Z. G., & Li, F. G. (2011). A Certificateless Proxy Ring Signature Scheme with Provable Security. International Journal of Network Security, 12(2), 92-106. https://doi.org/10.6633/IJNS.201103.12(2).04
- 徐碧鴻（2008）。Practical anonymous proxy signature schemes〔碩士論文，淡江大學〕。華藝線上圖書館。https://doi.org/10.6846/TKU.2008.00475
- Pan, C. H., Li, S. P., Zhu, Q. H., Wang, C. Z., & Zhang, M. W. (2015). Notes on Proxy Signcryption and Multi-proxy Signature Schemes. International Journal of Network Security, 17(1), 29-33. https://doi.org/10.6633/IJNS.201501.17(1).04
- Kang, B. Y. (2012). Attacks on One Designated Verifier Proxy Signature Scheme. Journal of Applied Mathematics, 2012(), 1295-1300-387. https://doi.org/10.1155/2012/508981