一个代理盲签名方案的安全性分析

一种一种基于身份的代理盲签名方案基于身份的代理盲签名方案丁圣龙丁圣龙，，赵一鸣(复旦大学软件学院，上海 200433)摘 要：分析一种代理盲签名方案，指出其在生成代理盲签名过程中存在的安全问题，由于不恰当地使用预计算，使攻击者可以轻易计算出代理密钥。

为克服该缺陷，提出一种新的基于身份的代理盲签名方案，该方案能够满足不可伪造性、盲性等安全特性，相比于同类方案，其计算复杂度更低。

关键词关键词：：基于身份；代理盲签名；双线性对；盲性；代理密钥安全ID-based Proxy Blind Signature SchemeDING Sheng-long, ZHAO Yi-ming(Software School, Fudan University, Shanghai 200433, China)【Abstract 】A proxy blind signature scheme is analyzed. It is found that proxy blind signature generation phase in this scheme is not secure, adversaries can easily find out the proxy key due to improper use of pre-computation. To resolve the problem, this paper proposes a new ID-based proxy blind signature scheme which satisfies the required security properties of unforgeability and blindness. It has lower computing complex compared with other schemes.【Key words 】ID-based; proxy blind signature; bilinear pairings; blindness; proxy key securityDOI: 10.3969/j.issn.1000-3428.2011.24.038计 算 机 工 程 Computer Engineering 第37卷 第24期V ol.37 No.24 2011年12月 December 2011 ·安全技术安全技术·· 文章编号文章编号：：1000—3428(2011)24—0114—03 文献标识码文献标识码：：A 中图分类号中图分类号：：TP3111 概述代理签名允许原始签名人将签名的权力委托给代理签名人，由代理签名人代替他进行签名，在分布式计算等需要权力委托的应用场景中受到重视。

无可信 PKG 的盲签名方案的安全性分析及改进李莎;李虓;何明星;罗大文【期刊名称】《计算机应用研究》【年(卷),期】2016(033)003【摘要】This paper analyzed the security of blind signature scheme without trusted PKG proposed by Zhou Ping,et al.It showed that the scheme couldn’t resist the forgery attack of the type one adversaryAⅠ.The adversary AⅠ could substitute the user’s partial public key and forge a valid blind signature on the arbitrary message.Therefore,this paper proposed an im-proved scheme.In the improved scheme,it added some system parameters in the verification equation,thus effectively proved the validity of the signer’s SID and resisted the public key replacement attack of adversary AⅠ.Analysis result shows that the improved sheme is secure,it can resist the forgery attacks of the adversary AⅠ,AⅡ and AⅢ.%针对周萍等人的无可信 PKG 的盲签名方案详细分析了其安全性，指出方案不能抵抗敌手AⅠ伪造攻击，敌手AⅠ可对用户的部分公钥进行替代，生成对任意消息的合法盲签名。

一种基于身份的门限盲代理盲签名方案付玮;刘广亮【期刊名称】《聊城大学学报（自然科学版）》【年(卷),期】2012(025)003【摘要】为了提高代理盲签名的实用性及安全性,结合秘密共享体制,在基于身份的密码体制下,提出一种新的盲代理盲签名方案.本方案中,我们将盲签名和代理签名结合,使得到的盲代理盲签名方案具有代理签名的权力委托和盲签名的消息匿名性和不可追踪性等特点;同时对代理签名者进行盲化,使得任何人不能从签名中知道代理签名者的身份.在基于身份的密码体制下,引入秘密共享机制,很好的防止了代理签名者权力滥用的问题.本方案具有更好的灵活性、更高的安全性等特性.%In order to improve the security and practicality of proxy blind signature,this paper introduces a blind-proxy blind signature scheme by adopting ID-based cryptography and secret sharing.In this scheme,the combination of proxy signature and blind signature can make the scheme has many characteristics,such as delegation of authority of proxy signature and the untraceability and anonymity of blind signature and so on.At the same time,blind the proxy signer make anyone can't know the identity of the proxy signers.Based on the identity cryptography,to introduce the secret sharing,will be good for solving the problem that the power of the proxy signers is too concentrated.SO this scheme has the better flexibility and higher security characteristics.【总页数】4页(P85-88)【作者】付玮;刘广亮【作者单位】聊城大学计算机学院,山东聊城252059;聊城大学计算机学院,山东聊城252059【正文语种】中文【中图分类】TP309【相关文献】1.一种基于无证书的门限盲代理盲签名方案 [J], 陈楠;张建中2.基于身份的门限代理盲签名方案 [J], 庄晨婕3.一种基于身份的门限盲签名方案 [J], 涂峰;赵一鸣4.基于身份的门限多代理多盲签名方案 [J], 杨长海5.一种新的基于身份的代理盲签名方案 [J], 梁林因版权原因，仅展示原文概要，查看原文内容请购买。

对一个基于离散对数代理盲签名的密码分析王蜀洪;王贵林;鲍丰;王杰【期刊名称】《软件学报》【年(卷),期】2005(016)005【摘要】Proxy signature allows an original signer to delegate his/her signing capability to a proxy signer such that the proxy signer can sign messages on behalf of the original signer. Blind signature allows a user to have a given message signed by the signer without revealing any information about the message. By using Schnorr blind signature, Tan et al. recently proposed a digital proxy blind signature scheme. They claimed that it satisfies the security properties of both blind signatures and proxy signatures. However, it is not the fact. This paper shows that the proposed scheme is vulnerable to universal forgery as well as linkability attacks. It also explains why their proofs of the security are incorrect.%顾名思义,代理签名让原始签名者可以将其数字签名权力委托给代理签名者,使其能够代理原始签名者签发指定的数字消息;盲签名使用户能将给定的消息让别人签发,而又不泄漏任何有关的信息给签名者.在Schorr盲签名的基础上,谭作文等结合代理签名和盲签名提出了一个基于离散对数的代理盲签名方案.研究表明该方案是不安全的.它既受到广泛伪造攻击,又是可连接的.我们还进一步说明,原文安全性定理的证明是不正确的.【总页数】5页(P911-915)【作者】王蜀洪;王贵林;鲍丰;王杰【作者单位】北京大学,数学科学院,北京,1000871;Cryptography Research Lab, Institute for Infocomm Research, 119613, Singapore;Cryptography Research Lab, Institute for Infocomm Research, 119613, Singapore;北京大学,数学科学院,北京,1000871【正文语种】中文【中图分类】TP309【相关文献】1.基于离散对数问题的多级代理盲签名方案 [J], 王晚;杜伟章2.基于离散对数的代理盲签名方案 [J], 柳菊霞;苏靖枫3.对一个基于离散对数代理盲签名方案的分析与改进 [J], 张瑛瑛;陈玮;曾吉文4.基于离散对数的容忍入侵的代理盲签名方案 [J], 刘风华;米军利;丁恩杰5.基于离散对数的多重代理部分盲签名 [J], 李彦;高德智;张伟哲因版权原因，仅展示原文概要，查看原文内容请购买。