Abstract:Certificateless cryptography involves a Key Generation Center (KGC) which issues a partial key to a user and the user also independently generates an additional public/secret key pair in such a way that the KGC who knows only the partial key but not the additional secret key is not able to do any cryptographic operation on behalf of the user; and a third party who replaces the public/secret key pair but does not know the partial key cannot do any cryptographic operation as the user either. We call this attack launched by the third party as the key replacement attack. In ACISP 2004, Yum and Lee proposed a generic construction of digital signature schemes under the framework of certificateless cryptography. In this paper, we show that their generic construction is insecure against key replacement attack. In particular, we give some concrete examples to show that the security requirements of some building blocks they specified are insufficient to support some of their security claims. We then propose a modification of their scheme and show its security in a new and simplified security model. We show that our simplified definition and adversarial model not only capture all the distinct features of certificateless signature but are also more versatile when compared with all the comparable ones. We believe that the model itself is of independent interest.A conventional certificateless signature scheme only achieves Girault's Level 2 security. For achieving Level 3 security, that a conventional signature scheme in Public Key Infrastructure does, we propose an extension to our definition of certificateless signature scheme and introduce an additional security model for this extension. We show that our generic construction satisfies Level 3 security after some appropriate and simple modification.

Distributed Certificateless Key Encapsulation Mechanism Secure Against the Adaptive Adversary

Distributed Certification Application Via a Trusted Dealer

Improvement of Provably Secure Self-Certified Proxy Convertible Authenticated Encryption Scheme

Adaptive Chosen Ciphertext Secure Threshold Key Escrow Scheme from Pairing

Efficient Chosen-Ciphertext Secure Certificateless Threshold Key Encapsulation Mechanism

Certificateless threshold cryptosystem secure against chosen-ciphertext attack

Efficient Password-Proven Key Exchange Protocol against Relay Attack on Ad Hoc Networks

CCA Secure Threshold KEM Scheme Against Adaptive Corruption Attacks in Standard Model

Improvement of Adaptive Threshold RSA

Provably Secure Identity-based Threshold Key Escrow from Pairing.

Further Attacks and Improvement of a Certificateless Signature Scheme.

Improved Adaptive Leakage-resilient Public Key Encryption Scheme

Key Replacement Attack Against A Generic Construction Of Certificateless Signature

New Certificateless Short Signature Scheme

Certificateless Signature: a New Security Model and an Improved Generic Construction

Security Analysis of Public Key Encryption Scheme Based on Attack Classification

Threshold Public-Key Encryption with Adaptive Security and Short Ciphertexts

Almost Tight Multi-user Security under Adaptive Corruptions from LWE in the Standard Model.

Security of an Efficient Id-Based Authenticated Key Agreement Protocol from Pairings

A Homomorphic Encryption Scheme with Adaptive Chosen Ciphertext Security but Without Random Oracle

Cryptanalysis of a certificateless encryption scheme