Affiliations: College of Computer and Information, Hohai University, Nanjing, China. [email protected]
Correspondence:
[†]
Address for correspondence: College of Computer and Information, Hohai University, No.8, Fochengxi Road, Jiangning District, Nanjing, China.
Note: [*] Also affiliated at: Guangxi Key Laboratory of Cryptography and Information Security.
Note: [‡] This work was supported in part by the National Natural Science Foundation of China (U173610004,61772009,61672207), the Priority Academic Program Development of Jiangsu Higher Education Institutions, Jiangsu Provincial Natural Science Foundation of China (BK20161511), the Fundamental Research Funds for the Central Universities (2016B10114), Jiangsu Collaborative Innovation Center on Atmospheric Environment and Equipment Technology, Guangxi Key Laboratory of Cryptography and Information Security (GCIS201605).
Abstract: In order to satisfy application in resource constrained environment, aggregate signature schemes have been widely investigated. Recently, He et al. pointed out that certificateless aggregate signature (CLAS) scheme proposed by Xiong et al. was insecure against the Type II adversary and presented an possible improvement. In this article, we show that their improved scheme is not secure against a malicious-but-passive KGC attack. We analyze attack reason and propose an improved certificateless aggregate signature scheme. Based on the CDH difficult problem assumption, the proposed CLAS scheme is existentially unforgeable against adaptive chosen-message attacks in the random oracle model.
