Security Pitfalls of the Certificateless Signature and Multi-Receiver Signcryption Schemes

Article type: Research Article

Authors: Shim, Kyung-Ah | Lee, Young-Ran

Affiliations: Division of Fusion and Convergence of Mathematical Sciences, National Institute for Mathematical Sciences, KT Daeduk 2 Research Center 463-1 Yuseong-gu, Daegeon, Korea. {kashim, yrlee}@nims.re.kr

Note: [] Address for correspondence: Division of Fusion and Convergence of Mathematical Sciences, National Institute for Mathematical Sciences, KT Daeduk 2 Research Center 463-1 Yuseong-gu, Daegeon, Korea

Abstract: Recently, Xiong et al. and Selvi et al. proposed a certificateless signature scheme secure in the standard model and a certificateless multi-receiver signcryption scheme secure in the random oracle model, respectively. In this paper, we show that they are insecure against malicious-butpassive KGC attacks. More specifically, the former does not achieve unforgeability and the latter does not satisfy confidentiality against type II adversaries.

Keywords: Certificateless signature, certificateless signcryption, certificatelessmulti-receiver signcryption, malicious-but-passive KGC attack, confidentiality, unforgeability

DOI: 10.3233/FI-2011-594

Journal: Fundamenta Informaticae, vol. 112, no. 4, pp. 365-376, 2011