Cryptanalysis on Improved Proxy Multi-signature Scheme

Chuanqi Feng

2010-01-01

Abstract:This paper analyzes a proxy multi-signature scheme and points out some problems in this scheme.The proxy signer can modify the proxy warrant if the delegation is not careful.The original signers can forge proxy signer’s signature.The original signers can forge a valid proxy multi-signature.Anyone can be framed.

What problem does this paper attempt to address?

A New Designated Verifier Proxy Signature in Standard Model

Li-Hong Guo,Hai-Tao Wu,Qing Yang

DOI: https://doi.org/10.2991/icwcsn-16.2017.32

2016-01-01

Abstract:Proxy signature schemes have been suggested for use in a number of applications, so the security of proxy signature scheme is more and more important. However, at present, almost all the proxy signature schemas were proven secure in the random oracle model, which has received a lot of criticism. Recently, Yu et al. proposed a designated verifier proxy signature scheme without random oracles by using Waters hashing technique. The formal models and a strictly logical process were provided in this schema. But Kang et al. show some attacks on Yu et al.s scheme and offer its insecurity proof. In this paper, in order to overcome the weaknesses in Yu et al.s scheme we make supplements on it and make it secure resist Kang et al.s attacks.
Cryptanalysis of an Identity Based Proxy Multi-Signature Scheme.

Fagen Li,Shijie Zhou,Rong Sun

DOI: https://doi.org/10.1093/ietfec/e91-a.7.1820

2008-01-01

Abstract:In a proxy multi-signature scheme, a designated proxy signer can generate the signature on behalf of a group of original signers. Recently, Wang and Cao proposed an identity based proxy multi-signature scheme along with a security model. Although they proved that their scheme is secure under this model, we disprove their claim and show that their scheme is not secure.
Cryptanalysis and Improvement of a Proxy Signature Scheme

夏琦,许春香,高建彬

DOI: https://doi.org/10.3724/sp.j.1087.2009.00353

2009-01-01

Journal of Computer Applications

Abstract:The security of the Fu-Kou-Xiao's proxy signature scheme with proxy signer's privacy anonymity was analyzed,and it was shown that the scheme did not possess the property of strong unforgeability.A forgery attack was given.Using this attack,a dishonest original signer can forge a proxy signing key and produce valid proxy signatures.The reason why the attack can work was analyzed and an improved scheme was proposed to remove the attack.
Cryptoanalysis of ID-based Proxy Re-Signature Scheme with Pairing-Free

Jianhong Zhang,Yuehai Wang

2019-01-01

Abstract:.As a significant cryptographical primitive, proxy re-signature(PRS) technique is broadly applied to distributed computation, copyright transfer and hidden path transfer because it permits that a proxy translates an entity’s signature into the other entity’s signature on the identical data. Recently, to discard time-consuming pairing operator and intricate certificate-maintenance, Wang et al. proposed two efficient pairing-free ID-based PRS schemes, and declared that their schemes were provably secure in the ROM. Very unluckily, in this investigation, we point out that Wang et al.’s schemes suffer from attacks of universal forgery by analysing their security, i.e., anyone can fabricate a signature on arbitrary file. After the relevant attacks are shown, the reasons which result in such attacks is analyzed. Finally, we discuss the corresponding improved method. Key–Words: ID-based PRS, integer factorization problem, universal forgeability, security attack
Improved Certificateless Multi-Proxy Signature

Jie XU,Hong-xiang SUN,Qiao-yan WEN,Hua ZHANG

DOI: https://doi.org/10.1016/s1005-8885(11)60288-4

2012-01-01

The Journal of China Universities of Posts and Telecommunications

Abstract:Multi-proxy signature is a scheme that an original signer delegates his or her signing capability to a proxy group. In the scheme, only the cooperation of all proxy signers in the proxy group can create a signature on behalf of the original signer. Jin and Wen firstly defined the formal security model of certificateless multi-proxy signature (CLMPS) and proposed a concrete CLMPS scheme. However, their construction has three problems: the definition of the strengthened security model is inaccurate, the concrete signature scheme has a security flaw, and the proof of the security is imperfect. With further consideration, a remedial strengthened security model is redefined, and an improved scheme is also proposed, which is existentially unforgeable against adaptively chosen-warrant, chosen-message and chosen-identity attacks in the random oracles. In this condition, the computational Diffie-Hellman (CDH) assumption is used to prove full security for our CLMPS scheme.
Cryptanalysis and Repair of Multi-proxy Signature Scheme

NIE Yong-wei,YU Yong

DOI: https://doi.org/10.3969/j.issn.1000-3428.2009.15.051

2009-01-01

Abstract:A multi-proxy signature scheme is proposed by Lee et al.However,their scheme is insecure.A forgery attack on their multi-proxy signature scheme is proposed in this paper.Using the forgery attack,a dishonest original signer can forgery a proxy signing key on behalf of all the original signers without their agreements and produce valid multi-proxy signatures,which does harm to the benefits of the proxy signer and other original signers.Four improved proxy key generation algorithms are also proposed to repair the scheme,which can resist effectively the forgery attack of original signers.
Cryptanalysis And Improvement Of A Certificateless Multi-Proxy Signature Scheme

Miaomiao Tian,Wei Yang,Liusheng Huang

DOI: https://doi.org/10.3233/FI-2013-976

2014-01-01

Fundamenta Informaticae

Abstract:Certificateless cryptography is a new type of public key cryptography, which removes the certificate management problem in traditional public key cryptography and the key escrow problem in identity-based public key cryptography. Multi-proxy signature is an extension of proxy signature, which allows an original signer authorizing a group of proxy signers and only the cooperation of all proxy signers in the group can create valid proxy signatures on behalf of the original signer. Recently, Jin and Wen combined certificateless cryptography with multi-proxy signature, and proposed a model as well as a concrete scheme of certificateless multi-proxy signature. They claimed that their scheme is provably secure in their security model. Unfortunately, in this paper by giving two attacks, we will show that their certificateless multi-proxy signature scheme can be broken. The first attack indicates their security model is flawed and the second attack indicates their certificateless multi-proxy signature scheme is insecure. Possible improvements are also suggested to prevent these attacks.
Cryptanalysis and Improvement of a Proxy-protected Signature Scheme

Xiaoming Hu,Zhe Zhang,Tong Wang

DOI: https://doi.org/10.1109/ICFN.2010.63

2010-01-01

Abstract:Recently, Liu et al. (Liu YC, Wen HA, Lin CL, Hwang T. Proxy-protected signature secure against the undelegated proxy signature attack. Computers and Electrical Engineering 2007; 33: 177-85) proposed one proxy signature scheme that is the improvement of Zhou et al.'s (Zhou Y, Cao Z, Lu R. Provably secure proxy-protected signature schemes based on factoring. Appl Math Comput2005; 164(1):83-98) proxy signature scheme based on the hard problem of integer factorization. In this paper, however,we show that Liu et al.'s scheme and Zhou et al.'s scheme are insecure against the replaced warrant attack: the original signer can prepare a new warrant and then remove the original warrant from the proxy signature to forge a new and valid proxy signature with the new warrant. To avoid the problem, an improved proxy signature scheme is proposed and its security is analyzed.
Improvement of Multi-Proxy Signature Scheme

QS Xue,ZF Cao

DOI: https://doi.org/10.1109/cit.2004.1357236

2004-01-01

Abstract:In this paper, the authors first review lin et al.'s multi-proxy signature scheme for partial delegation with cheater identification and point out its disadvantages. Then we further propose a modified multi-proxy signature scheme based on Lin et al.'s scheme to eliminate the drawback. The improved multi-proxy signature scheme can provide all security properties mentioned in some literatures. Furthermore, the computational overhead of the modified one is less than Lin et al.'s scheme and some other multi-proxy signature schemes. The improved scheme is simple, efficient and practical.
Analysis and Improvement of a Proxy Blind Multi-signature Scheme without a Secure Channel

Ying Sun,Chunxiang Xu,Qi Xia,Yong Yu

DOI: https://doi.org/10.1109/IAS.2009.167

2009-01-01

Abstract:Proxy blind signature is a cryptographic research hotspot, and has been applied in many occasions. Many proxy blind signature schemes were proposed, however, all the schemes rely on secure channels to transmit proxy secret key. Therefore, Lu, Cao and Zhou proposed a new proxy blind multi-signature scheme recently, which does not need a secure channel and is provably secure under the random oracle model. In this letter, however, we show that their scheme is not secure against the original signer's forgery attack. Moreover, we give four improved proxy key generation algorithms to counter this attack.
Attack and Improvement of a Proxy Signature Scheme

SUN Ying,XU Chun-xiang,WU Huai,CHEN Ai-dong

DOI: https://doi.org/10.3969/j.issn.1001-0548.2011.04.029

2011-01-01

Abstract:The security of some proxy signature schemes including a simple proxy signature scheme,controlled delegation in e-checks using proxy signature and a forward secure proxy signature scheme due to Ref. is analyzed.It is shown that all the schemes are insecure.A forgery attack on these schemes is proposed in this paper.Using the forgery attack,a malicious adversary can forgery a valid proxy signing key on behalf of the original signer without his/her agreement and produce valid proxy signatures,which does harm to the benefits of the original signer and the proxy signer.The corresponding corrected algorithms are proposed to resist this kind of forgery attack.
Security Analysis of A Proxy Signature Scheme Based on the Elliptic Curve Cryptosystem

Y Wu,YP Zhang,TJ Cao

DOI: https://doi.org/10.3969/j.issn.1000-1220.2006.05.007

2005-01-01

Abstract:In a secure proxy signature scheme, only the designated proxy signer could create a valid proxy signature on behalf of the original signer. Based on the elliptic curve discrete logarithm problem, Ji and Li proposed a proxy signature scheme and a proxy multi-signature scheme and Chen et al. proposed two proxy multi-signature schemes. However, in their schemes, the original signer can forge proxy secret key. To eliminate the original signers forgery attacks, a modification of the proxy key generation stage is proposed. Security analysis of the improved scheme is also presented.
An Improved Proxy Multi-Signature Scheme

周红生,铁玲,李建华,倪佑生

DOI: https://doi.org/10.16183/j.cnki.jsjtu.2004.01.020

2004-01-01

Abstract:Plural original signers can delegate their signing capabilities to proxy signers respectively to create a proxy signature on behalf of all original signers in a proxy multi-signature scheme. By partial delegation with warrant, this paper improved the previous proxy multi-signature scheme to a stronger and more efficient scheme. The security analysis shows that the new scheme is nonrepudiable because the authentic information of proxy signers is included in a valid proxy signature. It also prevents proxy signers from any misuse of signing capabilities by confining the signing capabilities of proxy signers and by designating a set of valid proxy signers in warrant.
Formal Model of Proxy Multi-Signature and a Construction

WANG Qin,CAO Zhen-Fu

DOI: https://doi.org/10.3321/j.issn:0254-4164.2006.09.017

2006-01-01

Chinese Journal of Computers

Abstract:As a variation of ordinary digital signature scheme, a proxy signature scheme enables a proxy signer to sign messages on behalf of the original signer. Proxy multi-signature is an extension of the basic proxy signature primitive, and permit two or more entities to delegate their signing capabilities to the same other entity. Although many proxy multi-signature schemes have been proposed since 2000, to date, no precise definitions or proofs of security have been provided for them. In this paper, the authors give the syntax of proxy multi-signature schemes and formalize a notion of security for them. The authors also construct a concrete scheme which is provablysecure assuming the underlying groups are bilinear group pair and the computational Co-DiffieHellman problem is hard. Furthermore, the new scheme is very simple and has the property that the size of a proxy multi-signature is independent of the number of the original signers.
Improvement of a Proxy Multi-Signature Scheme Without Random Oracles

Ying Sun,Chunxiang Xu,Yong Yu,Bo Yang

DOI: https://doi.org/10.1016/j.comcom.2010.02.002

IF: 5.047

2010-01-01

Computer Communications

Abstract:A proxy multi-signature scheme permits two or more original singers to delegate their signing powers to the same proxy signer. Recently, Liu et al. proposed the first proxy multi-signature that be proven secure in the standard model [Liu et al. (2008) [20]], which can be viewed as a two-level hierarchical signature due to Waters. However, because of the direct employment of Waters’ signature, their scheme needs a relatively large number of public parameters and is not tightly reduced to the security assumption. In this paper, inspired by Boneh, Boyen’s technique and Waters’ technique, we propose a new proxy multi-signature scheme without random oracles, whose unforgeability can be tightly reduced to the CDH assumption in bilinear groups. The new scheme can be regarded as an improvement to overcome the weaknesses of Liu et al.’s scheme. Compared with Liu et al.’s scheme, the improvement has three merits, tighter security reduction, shorter system parameters and higher efficiency.
On the security of an identity based multi-proxy signature scheme

Hu Xiong,Jianbin Hu,Zhong Chen,Fagen Li

DOI: https://doi.org/10.1016/j.compeleceng.2011.01.006

IF: 4.152

2011-01-01

Computers & Electrical Engineering

Abstract:In a multi-proxy signature scheme, an original signer could authorize a proxy group as his proxy agent. Then only the cooperation of all the signers in the proxy group can generate the proxy signatures on behalf of the original signer. Recently, Cao and Cao gave the first formal definition and security model of an identity-based multi-proxy signature scheme, then proposed an identity-based multi-proxy signature scheme from bilinear pairings and proved its security in their security model. Although they proved that their scheme is secure under this model, we disprove their claim and show that their scheme is not secure. We also present a simple fix to prevent this attack.
Cryptanalysis of two ECDLP-based proxy signature schemes

Tianjie Cao,Qian Zhao

2008-01-01

Journal of Computational Information Systems

Abstract:An ordinary digital signature scheme allows a signer to create signatures of documents and the generated signatures can be verified by any one. A proxy signature scheme, a variation of ordinary digital signature scheme, enables a proxy signer to sign messages on behalf of the original signer. To be used in different applications, such as ubiquitous computing systems, mobile communication, many proxy signature schemes were proposed. Any proxy signature scheme should satisfy the unforgeability property. In this paper, we show that Wang et al.'s ECDLP-based proxy blind signature scheme is insecure against the universal forgery and Wu and Shen's ECDLP-based proxy multi-signature scheme is insecure against the original signer's forgery. © 2008 Binary Information Press.
Improvement of a Threshold Proxy Signature Scheme

Chaosheng Feng,Zhiguang Qin,Ding Yuan

DOI: https://doi.org/10.1109/ICMLC.2007.4370693

2007-01-01

Abstract:In 2003, Hsu et al. presented an improved proxy signature scheme based on Sun et al.'s scheme to effectively defeat its drawback that the threshold value can be changed by proxy signers. However, security analysis on the improved scheme shows that both the improved scheme and the original one can't stand the insider conspiracy attack and the forge attack. Moreover, the signature based on them is not identifiable or nonrepudiable. Aiming at these weaknesses, an improved scheme is proposed in this paper. Security analysis on the new improved scheme shows that it effectively overcomes those disadvantages of Hsu et al.' s scheme.
Cryptanalysis of Two Nominative Proxy Signature Schemes

Yu Yong,Xu Chun-xiang,Zhou Min,Li Fa-gen

2009-01-01

Abstract:Analyses of two nominative proxy signature schemes proposed by Seo et al.(2003) and Huang et al.(2004) are given in this paper.The results show that neither the scheme has the property of strong unforgeability.A forgery attack on the two schemes is given,respectively.Using the forgery attack,a dishonest original signer can forge a proxy signing key on behalf of the designated proxy signer by assigning some parameters and produce valid nominative proxy signatures,which does harm to the benefits of the proxy signers.
Multi-Proxy Signature Without Random Oracles

Yu Yong,Sun Ying,Yang Bog,Xu Chunxiang,Liu Shuanggen

IF: 1.019

2008-01-01

Chinese Journal of Electronics

Abstract:In a multi-proxy signature scheme, an original signer delegates his or her signing capability to a group of proxy signers, in such a way that only the cooperation of all the proxy signers can generate a valid proxy signature on behalf of the original signer. Several multi-proxy signature schemes have been proposed so far. However, these works either only provide informal security analysis, or provide a security proof in the random oracle model, which has received a lot of criticism that the proofs in the random oracle model are not proofs. In this paper, we propose a new construction of multi-proxy signature that can be proven secure without using the random oracles. As for the security, we divide the potential adversaries into three kinds according to their attack power, and prove that the proposed scheme is unforgeable against all kinds of adversaries, assuming the Computational Diffie-Hellman problem is intractable. Furthermore, the new scheme has the property that the size of a multi-proxy signature is independent on the number of the proxy signers. As far as we know, this is the first multi-proxy signature scheme that can be proven secure in the standard model.

Cryptanalysis on Improved Proxy Multi-signature Scheme

A New Designated Verifier Proxy Signature in Standard Model

Cryptanalysis of an Identity Based Proxy Multi-Signature Scheme.

Cryptanalysis and Improvement of a Proxy Signature Scheme

Cryptoanalysis of ID-based Proxy Re-Signature Scheme with Pairing-Free

Improved Certificateless Multi-Proxy Signature

Cryptanalysis and Repair of Multi-proxy Signature Scheme

Cryptanalysis And Improvement Of A Certificateless Multi-Proxy Signature Scheme

Cryptanalysis and Improvement of a Proxy-protected Signature Scheme

Improvement of Multi-Proxy Signature Scheme

Analysis and Improvement of a Proxy Blind Multi-signature Scheme without a Secure Channel

Attack and Improvement of a Proxy Signature Scheme

Security Analysis of A Proxy Signature Scheme Based on the Elliptic Curve Cryptosystem

An Improved Proxy Multi-Signature Scheme

Formal Model of Proxy Multi-Signature and a Construction

Improvement of a Proxy Multi-Signature Scheme Without Random Oracles

On the security of an identity based multi-proxy signature scheme

Cryptanalysis of two ECDLP-based proxy signature schemes

Improvement of a Threshold Proxy Signature Scheme

Cryptanalysis of Two Nominative Proxy Signature Schemes

Multi-Proxy Signature Without Random Oracles