该文分析了无证书签名方案,指出该方案不能抵抗公钥替换攻击。采用绑定公钥到Hash函数的方法对洪方案进行改进,改进的方案可以抵抗替换公钥攻击,并且具有较高的效率,其安全性依赖于q强Diffie-Hellman(q-SDH)困难问题和逆计算Diffie-Hellman(Inv-CDH)困难问题。
By analyzing the security of the certificateless signature(CLS) scheme proposed by Hong et al,the authors pointed out that their scheme was insecure against public key replacement attack.An improved scheme was proposed using binding the public key to the hash function,which was secure against public key replacement attack and was very efficient.Its security relies on the hardness of q-strong Diffie-Hellman(q-SDH) problem and inverse-computational Diffie-Hellman(Inv-CDH) problem.