New Provably Secure Signature Scheme

Jie Wang,Wenbin Li

2003-01-01

Abstract:A new mathematical problem-Decisional Relevant-RSA problem was introduced to construct a new signature scheme.It is simple and secure against adaptive chosen-message attacks.In addition its security proof is in the standard model.

What problem does this paper attempt to address?

A New Designated Verifier Proxy Signature in Standard Model

Li-Hong Guo,Hai-Tao Wu,Qing Yang

DOI: https://doi.org/10.2991/icwcsn-16.2017.32

2016-01-01

Abstract:Proxy signature schemes have been suggested for use in a number of applications, so the security of proxy signature scheme is more and more important. However, at present, almost all the proxy signature schemas were proven secure in the random oracle model, which has received a lot of criticism. Recently, Yu et al. proposed a designated verifier proxy signature scheme without random oracles by using Waters hashing technique. The formal models and a strictly logical process were provided in this schema. But Kang et al. show some attacks on Yu et al.s scheme and offer its insecurity proof. In this paper, in order to overcome the weaknesses in Yu et al.s scheme we make supplements on it and make it secure resist Kang et al.s attacks.
Improvement of Provably Secure Self-Certified Proxy Convertible Authenticated Encryption Scheme

Qi Xie,Guilin Wang,Fubiao Xia,Deren Chen

DOI: https://doi.org/10.1002/cpe.3058

2013-01-01

Concurrency and Computation Practice and Experience

Abstract:By integrating self-certified public-key systems and the designated verifier proxy signature with message recovery, Wu and Lin proposed the first self-certified proxy convertible authenticated encryption (SP-CAE) scheme and its variants based on discrete logarithm problem (DLP) in 2009. Though their schemes are claimed provably secure, we demonstrate that their schemes are existentially forgeable under adaptive chosen warrants, unconfidentiable and verifiable under adaptive chosen messages and designated verifiers. Then we propose a provably secure SP-CAE scheme in the random oracle model.
Cryptoanalysis of ID-based Proxy Re-Signature Scheme with Pairing-Free

Jianhong Zhang,Yuehai Wang

2019-01-01

Abstract:.As a significant cryptographical primitive, proxy re-signature(PRS) technique is broadly applied to distributed computation, copyright transfer and hidden path transfer because it permits that a proxy translates an entity’s signature into the other entity’s signature on the identical data. Recently, to discard time-consuming pairing operator and intricate certificate-maintenance, Wang et al. proposed two efficient pairing-free ID-based PRS schemes, and declared that their schemes were provably secure in the ROM. Very unluckily, in this investigation, we point out that Wang et al.’s schemes suffer from attacks of universal forgery by analysing their security, i.e., anyone can fabricate a signature on arbitrary file. After the relevant attacks are shown, the reasons which result in such attacks is analyzed. Finally, we discuss the corresponding improved method. Key–Words: ID-based PRS, integer factorization problem, universal forgeability, security attack
A Provably Secure Ring Signature Scheme in Certificateless Cryptography

Lei Zhang,Futai Zhang,Wei Wu

DOI: https://doi.org/10.48550/arXiv.1712.09145

2017-12-26

Abstract:Ring signature is a kind of group-oriented signature. It allows a member of a group to sign messages on behalf of the group without revealing his/her identity. Certificateless public key cryptography was first introduced by Al-Riyami and Paterson in Asiacrypt 2003. In certificateless cryptography, it does not require the use of certificates to guarantee the authenticity of users' public keys. Meanwhile, certificateless cryptography does not have the key escrow problem, which seems to be inherent in the Identity-based cryptography. In this paper, we propose a concrete certificateless ring signature scheme. The security models of certificateless ring signature are also formalized. Our new scheme is provably secure in the random oracle model, with the assumption that the Computational Diffie-Hellman problem is hard. In addition, we also show that a generic construction of certificateless ring signature is insecure against the key replacement attack defined in our security models.

Cryptography and Security
Provably secure multi-signature scheme based on the standard SM2 signature scheme

Yuchen Xiao,Lei Zhang,Yafang Yang,Wei Wu,Jianting Ning,Xinyi Huang

DOI: https://doi.org/10.1016/j.csi.2023.103819

IF: 3.721

2023-12-07

Computer Standards & Interfaces

Abstract:The multi-signature scheme plays a crucial role in addressing trust and authentication challenges in digital transactions and other scenarios by allowing multiple users to sign the same message. Among various signature schemes, the SM2 signature scheme stands out for its exceptional security and efficiency, making it widely adopted in numerous fields. In this paper, we propose the first provably secure multi-signature scheme based on the standard SM2 signature scheme, i.e., the scheme can be reduced to the standard SM2 signature scheme when there is only one signer. We prove that our scheme is existential unforgeability under chosen message attacks in the bijective random oracle model, based on the assumption that the elliptic curve discrete logarithm problem is hard. Compared with the existing multi-signature schemes based on the SM2 signature scheme in the same category, our scheme exhibits improved efficiency in terms of communication delay and computational cost.

computer science, software engineering, hardware & architecture
On The Security Of Some Variants Of The Rsa Signature Scheme

M Michels,M Stadler,Hm Sun

DOI: https://doi.org/10.1007/BFb0055857

1998-01-01

Abstract:We describe adaptive attacks on several variants of the RSA signature scheme by de Jonge and Chaum. Moreover, we show how to break Boyd's scheme with an adaptive, a directed and a known signature attack. The feasibility of the adaptive attack on Boyd's scheme is illustrated by a concrete example.
A Strong RSA Signature Scheme and Its Application

Huafeng Wu,Haiguang Chen,Qiang Zhou,Chuanshan Gao

DOI: https://doi.org/10.1109/snpd.2007.33

2007-01-01

Abstract:We present an efficient improvement of the strong RSA signature scheme [1], which is very similar to Fischlin sig nature [2]. Both two signatures are based on strong RSA assumption. In the original scheme, the signer has to choose a prime with prescribed length in signing phase. Except that, three generators of QRn should be chosen in the set-up phase. Our scheme removes or relaxes these restrictions. It only needs to choose two generators of QRn and an odd. Our scheme saves about 1/2 computational cost of the original scheme. Moreover, we propose a blind signature scheme and a partially blind signature scheme based on the basic scheme. To the best of our knowledge, it's the first time to propose such a blind signature scheme and a partially blind signature scheme based on strong RSA assumption.
Security Analysis of an Identity-Based Signature from Factorization Problem

Ganglin Zhang,Yongjian Liao,Yu Fan,Yikuan Liang

DOI: https://doi.org/10.1109/access.2020.2964040

IF: 3.9

2020-01-01

IEEE Access

Abstract:Many sensitive data are generated by resource-limitation devices in the Vehicular ad hoc network (VANET). When these data are divulged, people 's life and property will be threatened. To solve these problems, Wei et al. proposed a lightweight privacy-preserving protocol based on RSA assumption for VANET and they claimed that their protocol was secure and low overhead. In this paper, first of all, we show that the basic signature scheme to be used in Wei et al.'s protocol is not secure, i.e., the user's private key will be revealed from the pairs of message-signatures, which causes the protocol to be insecure. We also show that our security analysis is feasible and effective in practice from the theory and experiments. Then we construct a new identity-based signature scheme based RSA assumption and prove it is existentially unforgeable under the chosen message attack without random oracle. Finally, we update the Wei et al.'s protocol and do some experiments to evaluate the efficiency of our scheme in the updated protocol.
New Signature with Shared Verification Scheme

WANG Yong,ZHU Yan-qin

DOI: https://doi.org/10.1007/0-387-34805-0_23

2011-01-01

Abstract:This paper presents a signature with shared verification scheme based on verifiable multi-secret sharing.The scheme effecitively overcomes the deficiencies of the previous schemes in terms of security.In the process of signature verification,validation group can prevent some members providing the faulted information.This can make verification failure.Because the scheme uses verifiable multi-secret sharing,it can verify many signatures when it makes once multi-secret sharing.It has higher efficiency compared with the previous schemes.
A New Threshold Signature Scheme to Withstand the Conspiracy Attack.

Jie Wang,Yongquan Cai,Jingyang He

DOI: https://doi.org/10.1109/cis.2010.80

2010-01-01

Abstract:Aiming at the weakness of existing schemes, a new threshold signature scheme to withstand the conspiracy attack is proposed in this paper. In this scheme, any subset of t or more than t members of the group can execute a valid threshold signature on behalf of the whole but can't construct legal group signature through giving two specific equations contained each other, so this scheme can not only withstand conspiracy attacks effectively, but also provide traceability under the premise of group signature anonymity. In addition, a new conspiracy attack method is designed, which was adopted to test the existing schemes and the new scheme of this paper, the result shows new scheme has higher security than existing ones.
A Reduction of Security Notions in Designated Confirmer Signatures

Yingjie Xia,Xuejiao Liu,Fubiao Xia,Guilin Wang

DOI: https://doi.org/10.1016/j.tcs.2015.12.025

IF: 1.002

2016-01-01

Theoretical Computer Science

Abstract:Since the invention of designated confirmer signatures (DCS), a number of schemes with various properties and different underlying mathematical problems have been developed. Although a considerable amount of work has been dedicated to the design of DCS schemes, the confusions of the security notions in the existing DCS models have not been formally discussed and clarified to achieve a proper level of confirmer's security. In order to achieve provable security, we propose a reduced security model and prove that a DCS cryptosystem only requires transcript-simulatability or alternatively invisibility plus non-transferability from a modelling perspective. Accompanied by the reduced DCS model, a generic DCS scheme is also constructed that still retains the feature of full verification, i.e., either the signer or the confirmer can interactively verify arbitrary signatures by providing a convincing proof. Our proposed scheme employs a computationally binding commitment scheme, together with an IND-CCA2 secure public encryption scheme, to achieve a provable security in the standard model. Meanwhile, we present an efficient concrete instantiation by using BLS signatures, CS-Paillier encryption scheme with labels, and Perdesen commitment scheme.
A New Efficient ID-Based Verifiably Encrypted Signature Scheme

Hou Guibin,Liu Jiaomin,Liu Wenyuan,Si Yali

DOI: https://doi.org/10.1109/csnt.2012.114

2012-01-01

Abstract:Based on the Hess signature scheme, a new efficient ID-based verifiably encrypted signature scheme was proposed. The scheme had the less pairing operations, and adjudicator signed a guarantee to avoid refusing to extract the common signature when resolving conflicts, thereby exchange signature protocol's fairness was enhanced. Compared with the other schemes, the proposed scheme was more efficient. At last its security was proved in the random oracle model. The proposed scheme was proved to be security assuming the computing Diffie-Hellman problem was hard.
On the Security of an Efficient Attribute-Based Signature.

Yan Zhang,Dengguo Feng,Zhengfeng Zhang,Liwu Zhang

DOI: https://doi.org/10.1007/978-3-642-38631-2_28

2013-01-01

Abstract:In CT-RSA 2011, Maji et.al proposed an attribute-based signature (ABS) scheme, which is the most efficient ABS scheme that supports general predicates until now. They claimed that their ABS scheme is unforgeable under generic group model. Unfortunately, we found a forgery attack on this ABS scheme. In this paper, we firstly give a forgery example, then analyze the reason cause this attack and gives the conditions this attack worked. We found this attack is fatal to Maji et.al's ABS scheme. © 2013 Springer-Verlag.
Insecurity of Chait et al.'s RSA-Based Aggregate Signature Scheme

Chanhyeok Park,Sangrae Cho,Young-Seob Cho,Soohyung Kim,Hyung Tae Lee

DOI: https://doi.org/10.1109/access.2024.3358849

IF: 3.9

2024-02-07

IEEE Access

Abstract:Recently, Chait et al. proposed a new aggregate signature scheme under the RSA setting (IEEE Access, 2023). In this paper, we show that Chait et al.'s aggregate signature scheme is insecure when two signers collude with their own secret keys, by presenting an attack algorithm that forges aggregate signatures of aggregator or individual signatures of all other (non-colluding) users. More concretely, our attack algorithm consists of three sub-algorithms: The first sub-algorithm computes a multiple of from secret keys of two users where is the RSA modulus that is included in the public parameter of the system and is the Euler totient function. The second sub-algorithm recovers an equivalent secret key of a target user that is congruent to his/her original secret key modulo from his/her public key and the multiple of which is the output of the first sub-algorithm. Finally, with the equivalent secret key obtained by the second sub-algorithm, the last sub-algorithm generates valid aggregate/individual signatures of the target user. Our attack algorithm always succeeds in forging aggregate/individual signatures. Furthermore, it is lightweight in the sense that it requires several integer operations, gcd computations, and an execution of aggregate/individual signing algorithm only. For example, when the pubic parameter and secret keys of all users, except the target user, are provided, our experimental results demonstrate that the proposed attack algorithm takes less than 1 second only in total to forge an aggregate signature of 29 individual signatures including that of the target user, where is 3,072 bits for 128-bit security.

computer science, information systems,telecommunications,engineering, electrical & electronic
New Efficient Certificateless Blind Signature Scheme

Haibin Chen,Lei Zhang,Junyuan Xie,Chongjun Wang

DOI: https://doi.org/10.1109/TrustCom.2016.82

2016-01-01

Abstract:As a new paradigm, certificateless public key cryptography was introduced by AI-Riyami and Paterson. It resolves the high cost of certificate in the traditional public key cryptography and the inherent key escrow problem in the identity-based cryptography. Due to the advantages of certificateless public key cryptography, a new efficient certificateless blind signature scheme from bilinear maps is proposed, which requires less computational effort by comparing with previous constructions. The number of pairing operations in the signing and verification phase of our scheme is only one. This is probably the best to achieve in pairing based signature schemes. Furthermore, we show that the proposed scheme is provably secure in the random oracle model. The security of our scheme is proven based on the hardness of q-Strong Diffie-Hellman problem and the Inverse Computational Diffie-Hellman problem.
Linkability of A Blind Signature Scheme and Its Improved Scheme

Jianhong Zhang,Tao Wei,JianYu Zhang,Wei Zou

DOI: https://doi.org/10.1007/11751632_28

2006-01-01

Abstract:Blind signature allows a user to obtain signatures from an authority on any document, in such a way that the authority learns nothing about the message that is being signed. The blindness is an important property in blind signature scheme. In this work, we analyze security of the blind signature[1], and show that the scheme hasn't blindness, in other words, the signer is able to link a valid message-signature pair obtained by some user. To overcome the above flaw, we propose an improved scheme and show that the security of the improved scheme is based on the Computational Diffie-Hellman problem.
A New Certificateless Blind Signature Scheme

Chandrasekaran Pandurangan,Akash Gautam,Sangeetha Jose

DOI: https://doi.org/10.22667/JOWUA.2014.03.31.122

Abstract:Blind signatures have key role in real world applications like e-cash, e-voting etc. The first blind signature was proposed by Chaum under public key infrastructure(PKI) model. The inherent problem in PKI is the certificate management which is overcome by identity(ID) based system. The ID based system is susceptible to key escrow problem. By removing the inherent problems of both PKI and ID based cryptosystems, Al Riyami et al. proposed a new cryptosystem called certificateless cryptosystem. Certificateless blind signature overcomes inherent key escrow problem in identity based blind signatures and does not require expensive certificates as in the public key infrastructure. Even though different certificateless blind signatures are proposed in the literature, rigorous formal proof is absent for all the proposals. Therefore in this paper we propose a new efficient provably secure certificateless blind signature scheme whose security can be proven to be equivalent to solving computational Diffie-Hellman (CDH) and chosen-target CDH problem in the random oracle model. As per our knowledge, our scheme is the only certificateless blind signature scheme which is proven to be strongly unforgeable and satisfies blindness property.

Computer Science
Practical RSA Signature Scheme Based on Periodical Rekeying for Wireless Sensor Networks

Shih-Ying Chang,Yue-Hsun Lin,Hung-Min Sun,Mu-En Wu

DOI: https://doi.org/10.1145/2140522.2140526

2012-01-01

ACM Transactions on Sensor Networks

Abstract:Broadcast is an efficient communication channel on wireless sensor networks. Through authentic broadcast, deployed sensors can perform legitimate actions issued by a base station. According to previous literature, a complete solution for authentic broadcast is digital signature based on asymmetric cryptography. However, asymmetric cryptography utilizes expensive operations, which result in computational bottlenecks. Among these cryptosystems, Elliptic Curve Cryptography (ECC) seems to be the most efficient and the most popular choice. Unfortunately, signature verification in ECC is not efficient enough. In this article, we propose an authentic broadcast scheme based on RSA. Unlike conventional approaches, the proposed scheme adopts short moduli to enhance performance. Meanwhile, the weakness of short moduli can be fixed with rekeying strategies. To minimize the rekeying overhead, a Multi-Modulus RSA generation algorithm, which can reduce communication overhead by 50%, is proposed. We implemented the proposed scheme on MICAz. On 512-bit moduli, each verification spends at most 0.077 seconds, which is highly competitive with other public-key cryptosystems.
Secure quantum signature scheme without entangled state

Tianyuan Zhang,Xiangjun Xin,Lei Sun,Chaoyang Li,Fagen Li

DOI: https://doi.org/10.1007/s11128-024-04257-5

IF: 1.965

2024-02-06

Quantum Information Processing

Abstract:The security of most quantum signatures cannot be proved with security model under chosen-message attack. No formal proof can prove that their security is fully dependent on the basic quantum theory. Based on the orthogonal quantum state and key-controlled quantum hash function, an arbitrated quantum signature is proposed. In this scheme, the signatory produces the quantum signature by quantum-encrypting the output of key-controlled quantum hash function. The signature verification is performed by decrypting the signed message and comparing the decrypted message with the output of the key-controlled quantum hash function. The security of the proposed scheme depends on the indistinguishability of the unknown quantum sequence. Its unforgeability can be formally proved with security model under chosen-message attack. Therefore, its security can be supported by the formal proof. On the other hand, in the proposed scheme, no entangled state is used. It also has better qubit efficiency as well.

physics, multidisciplinary,quantum science & technology, mathematical
Insecurity of an Efficient Identity-Based Proxy Signature in the Standard Model.

Debiao He,Mingwu Zhang,Baowen Xu

DOI: https://doi.org/10.1093/comjnl/bxu097

2014-01-01

The Computer Journal

Abstract:Recently, Gu et al. proposed an efficient identity-based proxy signature scheme and demonstrated their scheme was provably secure in the standard model. In this paper, we show their scheme is not secure against the malicious user through proposing three concrete attacks.

New Provably Secure Signature Scheme

A New Designated Verifier Proxy Signature in Standard Model

Improvement of Provably Secure Self-Certified Proxy Convertible Authenticated Encryption Scheme

Cryptoanalysis of ID-based Proxy Re-Signature Scheme with Pairing-Free

A Provably Secure Ring Signature Scheme in Certificateless Cryptography

Provably secure multi-signature scheme based on the standard SM2 signature scheme

On The Security Of Some Variants Of The Rsa Signature Scheme

A Strong RSA Signature Scheme and Its Application

Security Analysis of an Identity-Based Signature from Factorization Problem

New Signature with Shared Verification Scheme

A New Threshold Signature Scheme to Withstand the Conspiracy Attack.

A Reduction of Security Notions in Designated Confirmer Signatures

A New Efficient ID-Based Verifiably Encrypted Signature Scheme

On the Security of an Efficient Attribute-Based Signature.

Insecurity of Chait et al.'s RSA-Based Aggregate Signature Scheme

New Efficient Certificateless Blind Signature Scheme

Linkability of A Blind Signature Scheme and Its Improved Scheme

A New Certificateless Blind Signature Scheme

Practical RSA Signature Scheme Based on Periodical Rekeying for Wireless Sensor Networks

Secure quantum signature scheme without entangled state

Insecurity of an Efficient Identity-Based Proxy Signature in the Standard Model.