2008 International Conference on Networking, Architecture, and Storage On the Security of Group Signature Scheme and Designated Verifier Signature Scheme June 12-June 14 ISBN: 978-0-7695-3187-8
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/NAS.2008.21
As two special digital signatures, group signature and designatedverifier signature play very important roles in the e-commerce. A group signature scheme allows a group member to anonymously sign message on behalf of the group, In case of a dispute, the group manager can reveal the actual identity of signer. Group signature is widely used in e-cash, e-voting, e-bid and so on. In a designated verifier signature scheme, only the designated verifier can verify the validity of a signature. Thus, the designated verifier signature is widely applied in the copyright-protect. Recently, Zhou et.al presented a dynamicgroup signature scheme with forward security, and Zhang et.al gave an efficient ID-based designated verifiersignature scheme. Unfortunately, in this work we show that Zhou et.al's group signature is universally forgeable, Namely, any one can forge a group signature on another message by a given signature, then an improved vision is presented; And we also show that Zhang et.al's scheme is delegatable, namely, a third party can produce a signature on message m by the revealed side information. Finally, we give the corresponding attack on the two signature schemes.
Index Terms:
group signature, designated verifier signature, security analysis
Citation:
Jianhong Zhang, Qin Geng, "On the Security of Group Signature Scheme and Designated Verifier Signature Scheme," nas, pp.351-358, 2008 International Conference on Networking, Architecture, and Storage, 2008 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||