一种新的前向安全无证书签名方案的设计

摘要

针对无证书签名的密钥泄露问题研究出一种新的前向安全无证书签名方案。本方案主要通过定期更新用户的秘密值来提高前向安全性，与此同时保留了 KGC 文件生成用户公开公钥的特点来避免不诚实 KGC 文件中公钥与攻击替换的可能。在安全性分析中可见，该技术具备了较好的前向安全性，可有效辨别 KGC 文件的不诚实性行为，并防御不诚实 KGC 文件下的公钥替换攻击。%Aiming at the leakage of key of certificateless signature , this paper puts forward a new forward security certificateless signa -ture scheme.This scheme is to regularly renew the clients 'secret value to improve the security , and at the same time keep the character -istics of public key of the KGC document generation clients to avoid the possibility of substitution of public key by attack in the dishonest KGC document.The analysis of the security shows that the technology has good forward security and can effectively distinguish the dis -honest behaviour of KGC document and prevent the possibility of substitution of public key by attack under the dishonest KGC docu -ment.