Abstract:Recently, Chait et al. proposed a new aggregate signature scheme under the RSA setting (IEEE Access, 2023). In this paper, we show that Chait et al.'s aggregate signature scheme is insecure when two signers collude with their own secret keys, by presenting an attack algorithm that forges aggregate signatures of aggregator or individual signatures of all other (non-colluding) users. More concretely, our attack algorithm consists of three sub-algorithms: The first sub-algorithm computes a multiple of from secret keys of two users where is the RSA modulus that is included in the public parameter of the system and is the Euler totient function. The second sub-algorithm recovers an equivalent secret key of a target user that is congruent to his/her original secret key modulo from his/her public key and the multiple of which is the output of the first sub-algorithm. Finally, with the equivalent secret key obtained by the second sub-algorithm, the last sub-algorithm generates valid aggregate/individual signatures of the target user. Our attack algorithm always succeeds in forging aggregate/individual signatures. Furthermore, it is lightweight in the sense that it requires several integer operations, gcd computations, and an execution of aggregate/individual signing algorithm only. For example, when the pubic parameter and secret keys of all users, except the target user, are provided, our experimental results demonstrate that the proposed attack algorithm takes less than 1 second only in total to forge an aggregate signature of 29 individual signatures including that of the target user, where is 3,072 bits for 128-bit security.

Cryptanalysis of a Certificateless Aggregate Signature Scheme with Efficient Verification

Cryptanalysis of a Certificateless Aggregate Signature Scheme

Insecurity Of A Certificateless Aggregate Signature Scheme

Insecurity of an efficient certificateless aggregate signature with constant pairing computations

A New Certificateless Signature with Enhanced Security and Aggregation Version

Cryptanalysis Of A Certificateless Signature Scheme Without Pairings

Cryptanalysis and Improvement of a New Certificateless Signature Scheme in the Standard Model

A Provably Secure and Compact Certificateless Aggregate Signature Scheme

An Efficient Certificateless Aggregate Signature with Constant Pairing Computations

Insecurity of Chait et al.'s RSA-Based Aggregate Signature Scheme

An efficient provably secure certificateless aggregate signature applicable to mobile computation

Strong Security Enabled Certificateless Aggregate Signatures Applicable to Mobile Computation

Further Attacks and Improvement of a Certificateless Signature Scheme.

Practical Certificateless Aggregate Signatures from Bilinear Maps

Attack on Digital Multi-Signature Scheme Based on Elliptic Curve Cryptosystem.

Security Analysis of the Unrestricted Identity-Based Aggregate Signature Scheme

An Improved Certificateless Aggregate Signature

On The Security Of A Novel Construction Of Certificateless Aggregate Signature Scheme For Healthcare Wireless Medical Sensor Networks

New Certificateless Short Signature Scheme

Cryptanalysis and Improvement of an Efficient ID-based Certificateless Signature Scheme

Comments on "A Conditional Privacy-Preserving Certificateless Aggregate Signature Scheme in the Standard Model for VANETs"