Cryptanalysis and improvement of three certificateless aggregate signature schemes
type: Item
instance of: scholarly article
title: Cryptanalysis and improvement of three certificateless aggregate signature schemes
zbMATH Open document ID: 1426.94136
DOI: 10.1155/2018/1908632
author: Chunlin Chen
author: Xiao-Dong Yang
author: Yu-tong Li
author: Li-Kun Xiao
author: Cai-fen Wang
published in: Mathematical Problems in Engineering
publication date: 2019-02-08T00:00:00Z
review text: Summary: The certificateless aggregate signature (CLAS) scheme is a very important data aggregation technique that compresses a large number of signatures from different users into a short signature. CLAS can reduce the total length of a signature and the computational overhead of signature verification and is therefore highly suitable for resource-constrained network environments. Many CLAS schemes have been proposed in recent years, but the construction of a secure and efficient CLAS scheme remains important. In 2018, Li et al. found that the CLAS scheme proposed by He et al. could not resist malicious-but-passive KGC attacks, and they presented an improved CLAS scheme. Du et al. proposed a CLAS scheme with the constant aggregate signature length and claimed that their scheme was resistant to forgery attacks. Chen et al. designed a CLAS scheme with efficient verification and proved that their CLAS scheme was secure in the random oracle model. In this paper, we demonstrate that Li et al.'s CLAS scheme, Du et al.'s CLAS scheme, and Chen et al.'s CLAS scheme are insecure against coalition attacks and present concrete examples. That is, an attacker can forge a valid aggregate signature using some illegal single signatures. To withstand suck attacks, we propose an improved CLAS scheme based on Chen et al.'s CLAS scheme.
Mathematics Subject Classification ID: 94A60
Mathematics Subject Classification ID: 94A62
zbMATH DE Number: 7018568
MaRDI profile type: Publication
full work available at URL: https://doi.org/10.1155/2018/1908632
OpenAlex ID: W2888612888
cites work: Cryptanalysis and improvement of a certificateless aggregate signature scheme
cites work: Identity-Based Cryptosystems and Signature Schemes
cites work: Advances in Cryptology - ASIACRYPT 2003
cites work: Certificateless Signature Revisited
cites work: Provably secure and pairing-free certificateless digital signature scheme using elliptic curve cryptography
cites work: Q4434890
cites work: Notes on the security of certificateless aggregate signature schemes
cites work: An efficient certificateless aggregate signature with constant pairing computations
cites work: Insecurity of an efficient certificateless aggregate signature with constant pairing computations
cites work: Cryptanalysis and Improvement for Certificateless Aggregate Signature
cites work: Fast Software Encryption
description: scientific article; zbMATH DE number 7018568