标准模型下可证安全有效无证书签密方案

《标准模型下可证安全有效无证书签密方案》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、标准模型下可证安全有效无证书签密方案　　文章编号:10019081(2013)07184605doi:10.11772/j.issn.10019081.2013.07.1846摘要:目前大多数无证书签密方案都是在随机预言模型下提出的，针对随机预言模型下的方案往往无法在实际应用中构造相应实例这一问题，采用标准模型的方法来进行构造。在对几个已有标准模型下相应方案分析的基础上，指出它们都是不安全的。以Au等所提出的方案(AUMH,LIUJK,YUENTH,etal.Practicalhierarchicalidentitybasedencryptionandsignaturesch

2、emeswithoutrandomoracles.http://eprint.iacr.org/2006/368.pdf)为基础，利用椭圆曲线上的双线性对性质，提出了一个新的标准模型下可证安全的无证书签密方案。最后，利用决策双线性DiffieHellman(DBDH)等困难问题，证明该方案满足适应性选择密文攻击下的不可区分性以及适应性选择消息和身份攻击下的存在不可伪造性，因而方案是安全可靠的。关键词：标准模型；签密；可证明安全；无证书公钥密码体制中图分类号：TP309.2文献标志码:A英文标题4Efficientprovablysecurecertificatelesssigncryp

3、tionschemeinstandardmodel英文作者名SUNHua1*,MENGKun2英文地址(1.SchoolofComputerandInformationEngineering,AnyangNormalUniversity,AnyangHenan455000,China;2.DepartmentofComputerScienceandTechnology,TsinghuaUniversity,Beijing100084,China英文摘要)Abstract:Atpresent,mostoftheexistingcertificatelesssigncrypt

4、ionschemesprovensecureareproposedintherandomoracle.Concerningtheproblemthatthiskindofschemesusuallycannotconstructthecorrespondinginstanceinthepracticalapplication,acertificatelesssigncryptionschemewasdesignedinthestandardmodel.Byanalyzingseveralcertificatelesssigncryptionschemesinthestandardmodel,i

5、twaspointedoutthattheywereallinsecure.Basedon4Ausscheme(AUMH,LIUJK,YUENTH,etal.Practicalhierarchicalidentitybasedencryptionandsignatureschemeswithoutrandomoracles.http://eprint.iacr.org/2006/368.pdf),anewprovensecurecertificatelesssigncryptionschemewasproposedinthestandardmodelbyusingbilinearpair

6、ingtechniqueofellipticcurves.Intheend,itisprovedthattheschemesatisfiesindistinguishabilityagainstadaptivechosenciphertextattackandexistentialunforgeabilityagainstadaptivechosenmessageandidentityattackunderthecomplexityassumptions,suchasDecisionalBilinearDiffieHellman(DBDH)problem.Therefore,theschem

7、ewassecureandreliable.Atpresent,mostofexistedcertificatelesssigncryptionschemesprovensecurewereproposedintherandomoracle.Aimingattheproblemthatitalwayscouldnotbeabletoconstructthecorrespondingschemesi