【摘要】 通过对文献[8]提出的一种基于无证书的前向安全代理盲签名方案进行安全性分析发现,其方案无法抵抗恶意且消极KGC的公钥替换攻击,且该方案不满足不可否认性。针对以上问题,提出了一个改进方案,在用户密钥生成方式上做出了改进,通过单向哈希函数将用户公钥嵌入到部分私钥中,进而约束KGC生成的部分私钥,使得敌手无法伪造出合法密钥对进而冒充原始签名者进行授权。在代理盲签名阶段由消息拥有者的秘密值取代一个盲化因子,不仅能够减小计算量,而且消息拥有者也无法否认曾提供过该消息。安全性分析表明,改进方案能够抵抗恶意且消极KGC的公钥替换攻击并且满足不可否认性。效率分析表明,改进方案比原方案的计算效率更高。更多还原

【Abstract】 Through a security analysis of a certificateless forward security proxy blind signature scheme proposed by reference [8],this paper points out that its scheme cannot resist malicious and negative KGC public key replacement attacks, and the scheme does not satisfy non-repudiation.In view of the above problems, an improved scheme is proposed to improve the user key generation method.The one-way hash function is used to embed the user public key into part of the private key, thereby restricting the part of the private key generated by KGC,so that the adversary cannot forge Authorize by signing the legal key to impersonate the original signer.In the proxy blind signature phase, the secret value of the message owner replaces a blinding factor, which not only reduces the amount of calculation, but also the message owner cannot deny that the message was provided.Security analysis shows that the improved scheme can resist malicious and passive KGC public key replacement attacks and satisfy non-repudiation.The efficiency analysis shows that the improved scheme is more efficient than the original scheme.更多还原