分析了文献【18】中提出的基于身份环签名方案的安全性,发现其不具备存在不可伪造性这一数字签名最重要的性质,指出该方案是不安全的,并给出一种新的伪造攻击方法:身份组合伪造攻击。利用该攻击,一个恶意的环成员能够根据自己的身份伪造任意消息的有效环签名,且在伪造的环签名中,攻击者的身份甚至可以是不包含在此环签名的身份环中。
The security of the identity-based ring signature scheme of [18] is analyzed in this paper. It is found that this scheme did not possess the unforgeability property. It is also shown that the proposed scheme is insecure against a new kind of forgery attack, i.e. the identity assembly forgery attack. With such an attack, an adversary is able to forge valid ring signatures on any message based on the features of its identity, and the identity of the adversary can be even not included in the ring of the forged signature.