A method for certificateless digital signature

Abstract

The invention discloses a certificate-free digital signature method, belonging to the technical field of information security. In order to enable a signer in a certificate-free environment to sign a message, the method of the invention comprises the following steps: after initializing system parameters, a key generation center generates a partial private key DID and sends the DID to a signing end;the signature end randomly generates a secret value xID based on the system parameters, and sets the complete private key SID and the public key PKID together with the partial private key DID; the signature end generates a signature result sigma according to system parameters, identity, complete private key SID and message m, and sends the signature result sigma, message m, identity of the signature end and public key to the verification end for validity check. If sigma is the legal signature of the signer with respect to m, the verifier outputs 'Accept', otherwise it outputs 'Reject'. The invention is used for entity authentication and message authentication in a communication network, and provides authentication, integrity and non-repudiation services.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a certificateless digital signature method. Background technique [0002] Digital signature is a basic primitive in cryptography, which can enable the verification end to confirm the identity of the signing end and the integrity of the message, and is an important method to achieve integrity, authentication and non-repudiation . Integrity here refers to the characteristics that information cannot be destroyed or lost by accidental or deliberate deletion, modification, forgery, replay, insertion, etc. during transmission or storage. Authentication is ensuring that a communicating party is who it claims to be. Confirming the identity of an entity is called entity authentication, and confirming the source of a message is called message authentication. Non-repudiation is to prevent communication parties from denying previous promises or actions. [0003] Digital sign...

AI Technical Summary

Problems solved by technology

This method has the following two disadvantages: ① Before using any public key, it is necessary to verify the validity of the public key certificate, which increases the amount of calculation on the verification side; ② CA needs to manage a large number of certificates, including certificate issuance, storage, revocation, etc.

However, the identity-based approach has a fatal shortcoming: all private keys on the signing side are generated by PKG

These non-certificate signature methods require at least two bilinear pairing operations on the verification side, and the calculation cost is relatively high

Images