随机预言模型下的证明能够为无证书签名方案提供基本的安全保证,但随机预言机的实现方式可能会导致方案不安全。一些标准模型下的方案在提出后被证明无法抵抗公钥替换攻击。为了解决这一问题,构造了一个标准模型下安全的无证书签名方案,基于NGBDH和Many—DH困难问题,证明所提出的方案对自适应选择消息攻击是存在性不可伪造的。此外,提出的方案具有计算代价和通信代价较低、能够抵抗密钥替换攻击等优点。
The security of certificateless signature schemes can be proved under the random oracle model. However, any implementation of the random oracle may result in insecure schemes. Some certificateless signature schemes without random oracles are not secure against key replacement attack. In order to solve this problem, a new certificateless signature scheme in the standard model had constructed. Based on the NGBDH and Many-DH assumption, the scheme was proved secure against existentially unforgeable under adaptive chosen message attack. In addition, the proposed scheme enjoys less computation cost and lower communication bandwidth and can resist against key replacement attack.