On the security of certificateless signature scheme from Asiacrypt 2003

Authors

Xinyi Huang, Nanjing Normal UniversityFollow
Willy Susilo, University of WollongongFollow
Yi Mu, University of WollongongFollow
Futai Zhang, Nanjing Normal UniversityFollow

RIS ID

12981

Publication Details

Susilo, W., Mu, Y., Huang, X. & Zhang, F. (2005). On the security of certificateless signature scheme from Asiacrypt 2003. In Y. Desmedt, H. Wang, Y. Mu & Y. Li (Eds.), International Conference on Cryptology and Network Security (pp. 13-25). Heidelberg, Berlin: Springer - Verlag.

Abstract

In traditional digital signature schemes, certificates signed by a trusted party are required to ensure the authenticity of the public key. In Asiacrypt 2003, the concept of certificateless signature scheme was introduced. In the new paradigm, the necessity of certificates has been successfully removed. The security model for certificateless cryptography was also introduced in the same paper. However, as we shall show in this paper, the proposed certificateless signature is insecure in their defined model. We provide an attack that can successfully forge a certificateless signature in their model. We also fix this problem by proposing a new scheme.