关键词: 无证书公钥体制, 代理签名, 替换公钥攻击, 双线性对

Abstract:

A proposal of efficient certificateless signature scheme is presented to insecure against public key replacement attack. It is shown that an adversary who replaces the public key of the original signer can forge valid proxy delegations for the corresponding proxy signer without knowledge of the signers private key, and can even forge valid proxy signatures. To thwart this attack, an improved scheme is further proposed, which is not only more securer but also avoids the problems of the original scheme.

Key words: certificateless public key cryptography, proxy signature, public key replacement attack, bilinear pairings