两个标准模型下门限签名方案的安全性分析

摘要

为了提高门限签名方案的计算效率,石贤芝等(2013年)和张建中等(2012年)分别提出了标准模型下高效的门限签名方案.对两个方案构造了两个有效的伪造攻击:攻击者在不知道用户的私钥情况下,可以伪造用户对任何消息的有效门限签名.最后分析了方案不安全的原因.%To improve the computational efficient in the threshold signature scheme,Shi Xian-zhi et al.proposed an efficient threshold signature scheme in standard model in 2013,and a similar scheme was proposed by Zhang Jianzhong et al.in 2012.Two algorithms were constructed to attack the two schemes.In these attacks,the attacker could forge a valid threshold signature on any message on behalf of the user without knowing the signing key of the user.The causes of attacks were further analyzed in the end.