Cryptanalysis of some proxy signature schemes without certificates

  • Authors:
  • Wun-She Yap;Swee-Huay Heng;Bok-Min Goi

  • Affiliations:
  • Centre for Cryptography and Information Security, Faculty of Engineering, Multimedia University, Cyberjaya, Selangor, Malaysia;Centre for Cryptography and Information Security, Faculty of Information Science and Technology, Multimedia University, Melaka, Malaysia;Centre for Cryptography and Information Security, Faculty of Engineering, Multimedia University, Cyberjaya, Selangor, Malaysia

  • Venue:
  • WISTP'07 Proceedings of the 1st IFIP TC6 /WG8.8 /WG11.2 international conference on Information security theory and practices: smart cards, mobile and ubiquitous computing systems
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

The concept of proxy signature was introduced by Mambo et al. to delegate signing capability in the digital world. In this paper, we show that three existing proxy signature schemes without certificates, namely, the Qian and Cao identity-based proxy signature (IBPS) scheme, the Guo et al. IBPS scheme and the Li et al. certificateless proxy signature (CLPS) scheme are insecure against universal forgery. More precisely, we show that any user who has a valid public-private key pair can act as a cheating proxy signer and forge the proxy signature on behalf of the original signer at will, without obtaining the official delegation from the original signer.