Security Analysis of Two Certificateless Signature Schemes
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Certificateless cryptography eliminates the need of certificacates in the public key crytosystems and solves the inherent key escrow problem in identity-based cryptosystems. This paper demonstrates that two certificateless signature schemes proposed by Guo et al. and Wang et al. respectively are insecure against key replacement attacks by a type I adversary. We show that the adversary who can replace a signer's public key can forge signatures under the replaced public key. We then make a suggestion to prevent the attacks.
Abstract
Certificateless cryptography eliminates the need of certificacates in the public key crytosystems and solves the inherent key escrow problem in identity-based cryptosystems. This paper demonstrates that two certificateless signature schemes proposed by Guo et al. and Wang et al. respectively are insecure against key replacement attacks by a type I adversary. We show that the adversary who can replace a signer's public key can forge signatures under the replaced public key. We then make a suggestion to prevent the attacks.
참고문헌 (14)
- S. Al-Riyami, "Certificateless public key cryptogaphy", Advances in Cryptology, ASIACRYPT 2003, pp.452~473 (2003)
- M.H. Au, "Malicious KGC attack in certificateless cryptography", ACM Symposium on Information, Computer and Communications Security, ASIACCS 2007, pp.302~311 (2007)
- K.Y. Choi, "Efficient certificateless signa ture schemes", International Conference on Applied Cryptography and Network Security, ACNS 2007, pp.443~458 (2007)
- M. Gorantla, "An effiective certificateless signature scheme based on bilinear pairings", International Workshop on Security in Information Systems, pp.31~39 (2005)
- M. Gorantla, "An efficient certificateless signature scheme", International Conference on Computational Intelligence and Security, CIS 2005, pp.110~116 (2005)
- L. Guo, "A practical certificateless signature scheme", International Symposium on Data, Privacy, and E-Commerce, IEEE ISDPE 2007, pp.248~253 (2007)
- B. Hu, "Key replacement attack against a generic construction of certificateless signature", Australasian Conference on Information Security and Privacy, ACISP 2006, pp.235~246 (2006)
- X. Huang, "On the security of certificateless signature scheme from ASIACRYPT 03", International Conference on Cryptology and Network Security, CANS 2005, pp.13~25 (2005)
- X. Li, "Certificateless signature and proxy signature schemes from bilinear pairings", Lithuanian Mathematical Journal, 45(1), pp.95~103 (2005)
- J.K. Liu, "Self-generated-certificate public key cryptography and certificateless signature", encryption scheme in the standard model, 2007, 273~283
- A. Shamir, "Identity-base cryptosystems and signature schemes", Advances in Cryptology, CRYPTO 84, pp.47~53 (1985)
- C. Wang, "An efficient certificateless signature from pairings", International Symposium on Data, Privacy, and E-Commerce, IEEE ISDPE 2007, pp.236~238 (2007)
- D. Yum, "Generic construction of certificateless signature", Australasian Conference on Information Security and Privacy, ACISP 2004, pp.200~211 (2004)
- Z. Zhang, "Certificateless public-key signature : security model and efficient construction", International Conference on Applied Cryptography and Network Security, ACNS 2006, pp.293~308 (2006)