Cryptanalysis and improvement of a proxy signature with message recovery using self-certified public key
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Combining the concept of self-certified public key and message recovery, Li-Zhang-Zhu (LZZ) gives the proxy signature scheme with message recovery using self-certified public key. The security of the proposed scheme is based on the discrete logarithm problem (DLP) and one-way hash function (OWHF). Their scheme accomplishes the tasks of public key verification, proxy signature verification, and message recovery in a logically single step. In addition, their scheme satisfies all properties of strong proxy signature and does not use secure channel in the communication between the original signer and the proxy signer. In this paper, it is shown that in their signature scheme a malicious signer can cheat the system authority (SA), by obtaining a proxy signature key without the permission of the original signer. At the same time malicious original signer can also cheat the SA, he can also obtain a proxy signature key without the permission of the proxy signer. An improved signature scheme is being proposed, which involves the remedial measures to get rid of security flaws of the LZZ et al.'s. The security and performance analysis shows that the proposed signature scheme is maintaining higher level of security, with little bit of computational complexity.
Abstract
Combining the concept of self-certified public key and message recovery, Li-Zhang-Zhu (LZZ) gives the proxy signature scheme with message recovery using self-certified public key. The security of the proposed scheme is based on the discrete logarithm problem (DLP) and one-way hash function (OWHF). Their scheme accomplishes the tasks of public key verification, proxy signature verification, and message recovery in a logically single step. In addition, their scheme satisfies all properties of strong proxy signature and does not use secure channel in the communication between the original signer and the proxy signer. In this paper, it is shown that in their signature scheme a malicious signer can cheat the system authority (SA), by obtaining a proxy signature key without the permission of the original signer. At the same time malicious original signer can also cheat the SA, he can also obtain a proxy signature key without the permission of the proxy signer. An improved signature scheme is being proposed, which involves the remedial measures to get rid of security flaws of the LZZ et al.'s. The security and performance analysis shows that the proposed signature scheme is maintaining higher level of security, with little bit of computational complexity.
참고문헌 (22)
- The elliptic curve digital signature algorithm (ECDSA), , American Bankers Association, ~, pp.ANSI X9.62-1999 (1999)
- W. Diffe, "New directions in cryptography", IEEE Trans. Inform. Theory, IT-22, pp.644~654 (1976)
- T. ElGamal, "A public key cryptosystem and a signature scheme based on discrete loga-rithms", IEEE Trans. Inform. Theory, IT-31, pp.469~472 (1985)
- M. Girault, "Self-certi ed public keys", Advances in Cryptology Eurocrypt' 91, pp.491~497 (1991), Springe-Verlag
- C. L. Hsu, "Effcient proxy signature schemes using self-certified public keys", Appl. Math. Comput, 152(3), pp.807~820 (2004)
- N. Koblitz, "Elliptic curve cryptosystems", Math. Comp, 48(177), pp.203~209 (1987)
- J. G. Li, "A new proxy signature scheme with message recovery using self-certi ed public key", Wuhan Univ. J. Nat. Sci, 10(1), pp.219~222 (2005)
- R. Lu, "Designated veri er proxy signature scheme with message recovery", Appl. Math. Comput, 169(2), pp.1237~1246 (2005)
- M. Mambo, "Proxy signatures: delegation of the power to sign messages", IEICE Trans. Fundam, E79-A(9), pp.1338~1354 (1996)
- V. S. Miller, "Use of elliptic curves in cryptography", Advances in cryptologyCRYPTO '85, pp.417~426 (1986), Springer
- National Institute of Standards and Technology, "A proposed federal information pro-cessing standard for digital signature standard (DSS)", Federal Register, 56(169), pp.42980~42982 (1991)
- K. Nyberg, "Message recovery for signature schemes based on the discrete logarithm problem", Advances in cryptologyEUROCRYPT '94, pp.182~193 (1995), Springer
- S. Padhye, "ECDLP-based certi cateless proxy signature scheme with message recovery", Trans. Emerging Tel. Tech, 26, pp.346~354 (2015)
- R. Rajaram Ramasamy, "Digital signature scheme with mes-sage recovery using knapsack-based ECC", Int. J. Network Security, 12(1), pp.7~12 (2011)
- R. L. Rivest, "A method for obtaining digital signatures and public key cryptosystems", Comm. ACM, 21(2), pp.120~126 (1978)
- C. P. Schnorr, "Effcient signature generation by smart cards", J. Cryptol, 3(3), pp.161~174 (1991)
- A. Shamir, "Identity-based cryptosystems and signature schemes", Advances in cryptology, pp.47~53 (1985), Springer
- Z. Shao, "Improvement of ecient proxy signature schemes using self-certi ed public keys", Appl. Math. Comput, 168(1), pp.222~234 (2005)
- H. Singh, "ID-based proxy signature scheme with message recovery", J. Sys. Software, 85, pp.209~214 (2012)
- M. Tian, "Cryptanalysis of an ID-based proxy signature scheme with message recovery", Appl. Math. Inf. Sci, 6(3), pp.419~422 (2012)
- T. S. Wu, "Self-certified multi-proxy signature schemes with message recovery", J. Zhejiang Univ. Sci. A, 10(2), pp.290~300 (2009)
- Q. Xie, "Provably secure self-certi ed multi-proxy signature with message recovery", J. Networks, 7(10), pp.1616~1623 (2012)