| 本文已被：浏览 3361次 下载 7334次 |
码上扫一扫！ |
|
|
| 高效可证安全的无证书聚合签名方案 |
|
周彦伟1,2,3, 杨波1,2,3, 张文政2
|
|
1.陕西师范大学计算机科学学院, 陕西 西安 710062;2.国家保密通信重点实验室, 四川 成都 610041;3.信息安全国家重点实验室(中国科学院信息工程研究所), 北京 100093
|
|
| 摘要: |
| 由于现有聚合签名方案多数是基于双线性映射构造,存在计算效率低的不足.针对不同的网络环境,提出了2种不使用双线性映射的无证书聚合签名方案CLAS-Ⅰ和CLAS-Ⅱ,并在随机预言机模型下,基于离散对数困难问题证明了方案的不可伪造性;同时,分析了该方案所具有的公开验证性等安全属性.与现有方案相比较,由于未使用双线性映射运算,该方案具有更高的计算效率.由于方案CLAS-Ⅰ的聚合签名长度较长,将用于带宽较高的网络环境;CLAS-Ⅱ具有较短的签名长度,且长度与用户数无关,将用于带宽较低的网络环境. |
| 关键词: 无证书聚合签名 随机预言机模型 无双线性映射 离散对数问题 |
| DOI：10.13328/j.cnki.jos.004830 |
| 分类号: |
| 基金项目:国家自然科学基金(61272436,61402275,61303092,61572303);中国科学院信息工程研究所信息安全国家重点实验室开放课题(2015-MS-10);保密通信重点实验室基金(9140C110206140C11050);陕西省自然科学基金(2014JQ8309);中央高校基本科研业务费专项资金(GK201504016,GK20130205);陕西师范大学优秀博士论文资助项目(X2014YB01) |
|
| Efficient and Provide Security Certificateless Aggregate Signature Scheme |
|
ZHOU Yan-Wei1,2,3, YANG Bo1,2,3, ZHANG Wen-Zheng2
|
|
1.School of Computer Science, Shaanxi Normal University, Xi'an 710062, China;2.Science and Technology on Communication Security Laboratory, Chengdu 610041, China;3.State Key Laboratory of Information Security(Institute of Information Engineering, the Chinese Academy of Sciences), Beijing 100093, China
|
| Abstract: |
| Almost all existing aggregate signature schemes are based on bilinear pairing which leads to high computational cost. In order to solve this problem under different network environment, two new certificateless aggregate signature schemes without bilinear pairing CLAS-Ⅰ and CLAS-Ⅱ are proposed in this paper. The proposed schemes are provably unforgeable in the random oracle model under the discrete logarithm assumption, and also have the security properties of public verifiability. Moreover, compared with other existing aggregate signature schemes in the computationally complexity, the proposal are more efficient. Meanwhile, the scheme CLAS-Ⅰ can be used for high bandwidth network environment because the length of signature is long, and the scheme CLAS-Ⅱ can be used in a narrow bandwidth network environment since it is the shortest certificateless aggregate signature and the number of users does not correlate to the length of the signatures generated by CLAS-Ⅱ,. |
| Key words: certificateless aggregate signature random oracle model without bilinear pairing discrete logarithm problem |
