簽章驗證加速機制之安全性分析

Cryptanalysis on Mechanisms for Accelerating Signature Verification

蔣函霏(Han-fei Chiang)

指導教授 ： 顏嵩銘

國立中央大學/資訊電機學院/資訊工程學系/碩士(2008年)

摘要

簽章驗證通常包含許多複雜且耗時之運算，為了促進驗證效率，驗證者可採取某些機制輔助，以減少驗證時之線上運算量。其中最為著名的驗證加速機制分別為批次驗證，與伺服器輔助驗證。批次驗證之概念為將簽章整批處理，期望能達到比將簽章依次處理而更佳的驗證速度。伺服器輔助驗證之概念為，將驗証者所需之部分運算量，交由一計算能力更為強大的伺服器協助計算，以減輕驗證者之運算負擔。然而此兩種機制於設計時皆須謹慎考量，以避免降低原本簽章系統之安全性。本論文分別針對批次驗證及伺服器輔助驗證，提出安全性分析並且加以深入討論，指出其安全考量上之重要性。

關鍵字

電子簽章 ； 伺服器輔助驗證 ； 批次驗證

並列摘要

Signature verification involves time-consuming operations. There are two mechanisms supposed to accelerate signature verification. One is batch verification, and the other is server-aided verification. Batch verification aims to verify signatures in a batch to reduce re-operations. Server-aided verification aims to delegate part of computational load to a powerful but untrusted server to ease the on-line computational burden. Both of the two mechanisms should carefully avoid violating the security guarantee of the original signature schemes. In the thesis the cryptanalysis on both batch verification and server-aided verification is provided with the security
notions.

並列關鍵字

server-aided verification ； digital signature ； batch verification

參考文獻

[4] T. Cao, D. Lin and R. Xue, “Security analysis of some batch verifying signatures from pairings,” International Journal of Network Security, vol.3, no.2, pp.112–117, 2006.

[10] S. Cui, P. Duan and C. W. Chan, “An efficient identity-based signature scheme with batch verifications,” Proc. of the First International Conference on Scalable

[1] M. Bellare, J. Garay, and T. Rabin, “Fast batch verification for modular exponentiation and digital signatures,” Advances in Cryptology – Eurocrypt ’98,

[5] J. Cha and J. Cheon, “An ID-based signature from gap-Diffie-Hellman groups,” Public Key Cryptography – PKC''03, LNCS 2567, pp. 18–30, Springer-Verlag, 2003.

[6] J. H. Cheon and D. H. Lee, “Use of sparse and/or complex exponents in batch verification of exponentiations,” IEEE Trans. on Computers, vol. 55, no.12,