针对现有代理签名方案不能抵抗公钥替换攻击问题,结合无证书密码系统的特点,提出一i个具有随机因子的无证书强代理签名方案.方案设计基于双线性对,能够减少通信量,运行效率高.证明了本方案能满足无证书公钥体制下强代理签名应具备的所有性质.在密钥生成时为用户引入一个秘密随机因子,在签名中使用两个hash函数,能有效地抵抗公钥替换攻击.安全性分析表明方案可同时满足强不可伪造性、强不可否认性、强可识别性及防滥用性.
To solve the problem of. public key replacement attack in existing proxy signature schemes, combining with the characteristics of certificateless cryptography system, a new certificateless strong proxy signature scheme with random factors is proposed. The scheme is derived from bilinear pairings, which can reduce the amount of communication, improve operational efficiency. It is proved that our scheme satisfies all the requirements of strong proxy signatures in certificateless public key cryptography. A secret random factor is introduced in generating the key for a user with using two hash functions in the signature, which can effectively against public key replacement attack. The security analysis shows that our scheme is security in meeting the strong unforgeability, strong undeniablility, strong identifiability and anti-abuse.