Efficient Certificate-Based Signcryption Scheme from Bilinear Pairings

Li, F.; Xin, Xiangjun; Hu, Yupu

doi:10.1080/1206212x.2008.11441891

Cited by 5 publications

(10 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In 2008, the introduction of the certificateless approach in signcryption schemes has been proposed in [10,11]. The same year, also certificate based signcryption schemes [12] have been introduced. Most of the certificate based and certificateless signcryption schemes are also based on pairing operation.…”

Section: Related Workmentioning

confidence: 99%

Pairing Free Certificate Based Signcryption Schemes Using ECQV Implicit Certificates

2019

KSII TIIS

View full text Add to dashboard Cite

Signcryption schemes offer the possibility to simultaneously sign and encrypt a message. In order to guarantee the authentication of both signer and receiver in the most efficient way during the signcryption, certificate based solutions have been proposed in literature. We first compare into detail three recently proposed certificate based signcryption systems relying on the elliptic curve discrete logarithm problem and without the usage of compute intensive pairing operations. Next, we demonstrate how the performance of these certificate based systems can be improved by using the Elliptic Curve Qu Vanstone (ECQV) implicit certificates. What is more, generalized signcryption schemes are easily derived from these schemes and the anonymity feature of sender and receiver is already inherently included or can be very efficiently obtained without a significant additional cost.

show abstract

Section: Related Workmentioning

confidence: 99%

Pairing Free Certificate Based Signcryption Schemes Using ECQV Implicit Certificates

2019

KSII TIIS

View full text Add to dashboard Cite

show abstract

“…Wu and others proposed another generic construction of CBE from CL-PKE [24]. Many other CBE schemes have been proposed [25]- [29]. In 2006, Morillo and others proposed the first CBE scheme without random oracles [30].…”

Section: Related Workmentioning

confidence: 99%

“…Although the concept of CB-PKC was proposed in 2003, the first certificate-based signcryption (CBSC) was first introduced in 2008 by Li and others [25]. Lou and colleagues [37] proposed another CBSC scheme with a security proof, which turned out to be unsecure under two concrete attacks, described in [38] and [39].…”

Section: Related Workmentioning

confidence: 99%

Certificate-Based Signcryption Scheme without Pairing: Directly Verifying Signcrypted Messages Using a Public Key

Le¹,

Hwang²

2016

ETRI J

View full text Add to dashboard Cite

To achieve confidentiality, integrity, authentication, and non-repudiation simultaneously, the concept of signcryption was introduced by combining encryption and a signature in a single scheme. Certificate-based encryption schemes are designed to resolve the key escrow problem of identity-based encryption, as well as to simplify the certificate management problem in traditional public key cryptosystems. In this paper, we propose a new certificate-based signcryption scheme that has been proved to be secure against adaptive chosen ciphertext attacks and existentially unforgeable against chosen-message attacks in the random oracle model. Our scheme is not based on pairing and thus is efficient and practical. Furthermore, it allows a signcrypted message to be immediately verified by the public key of the sender. This means that verification and decryption of the signcrypted message are decoupled. To the best of our knowledge, this is the first signcryption scheme without pairing to have this feature.Keywords: Signcryption, certificate-based signcryption, certificate-based public key cryptography. Manuscript received Nov. 15, 2015; revised Mar. 3, 2016, accepted Apr. 19, 2016 I. IntroductionAuthentication is a fundamental block of a secure system. Basically, it is a process for verifying that the identity of an entity belongs to a human or a device. For example, in the authentication process, a certificate in traditional public key cryptography (PKC) is usually used to prove that a public key belongs to a specific user. However, a public key infrastructure (PKI) that supports a traditional PKC has issues, such as complex installation and maintenance processes, issuance, distribution, and a revocation of the certificates.Although the authentication process seems to be irreplaceable, some public key cryptography models have been proposed in which the certificate is eliminated. In 1984, Shamir proposed the first concept of identity-based public key cryptography (ID-PKC) [1]. This scheme shows a great improvement, that is, it does not require PKI because the public key is an identity (for example, email, ID number, driver license number, and so on). In ID-PKC, a private key generator (PKG) uses a master secret key to generate all private keys for its users. The PKG requires secure channels to deliver the private keys to users securely. Although the improvement in ID-PKC is significant, some architectural issues still remain: (1) A secure channel to deliver the private keys is significantly costly to implement. (2) The PKG can impersonate any user at any time because it knows the private keys of all users, which is called the key escrow problem. This issue is unacceptable in certain cases such as legal applications because the PKG cannot guarantee non-repudiation. (3) Finally, the security of the whole system depends on the secrecy of the master secret key. If the PKG is compromised and the master key is revealed, the whole system is affected.To overcome the drawbacks of the traditional PKC and ID-PKC, the first concept ...

show abstract

“…Since its advent, CBC has attracted great interest in the research community and many schemes have been proposed, including many encryption schemes (e.g., [ 4 – 10 ]) and signature schemes (e.g., [ 11 – 16 ]). As an extension of the signcryption [ 17 ] in CBC, Li et al [ 18 ] introduced the concept of certificate-based signcryption (CBSC) that provides the functionalities of encryption and signature simultaneously. As far as we know, there exist three CBSC schemes in the literature so far.…”

Section: Introductionmentioning

confidence: 99%

“…As far as we know, there exist three CBSC schemes in the literature so far. In [ 18 ], Li et al proposed the first CBSC scheme based on Chen and Malone-Lee's identity-based signcryption scheme [ 19 ]. However, they did not give a formal proof of their security claim.…”

Section: Introductionmentioning

confidence: 99%

Efficient Certificate-Based Signcryption Secure against Public Key Replacement Attacks and Insider Attacks

2014

The Scientific World Journal

View full text Add to dashboard Cite

Signcryption is a useful cryptographic primitive that achieves confidentiality and authentication in an efficient manner. As an extension of signcryption in certificate-based cryptography, certificate-based signcryption preserves the merits of certificate-based cryptography and signcryption simultaneously. In this paper, we present an improved security model of certificate-based signcryption that covers both public key replacement attack and insider security. We show that an existing certificate-based signcryption scheme is insecure in our model. We also propose a new certificate-based signcryption scheme that achieves security against both public key replacement attacks and insider attacks. We prove in the random oracle model that the proposed scheme is chosen-ciphertext secure and existentially unforgeable. Performance analysis shows that the proposed scheme outperforms all the previous certificate-based signcryption schemes in the literature.

show abstract

Efficient Certificate-Based Signcryption Scheme from Bilinear Pairings

Cited by 5 publications

References 15 publications

Pairing Free Certificate Based Signcryption Schemes Using ECQV Implicit Certificates

Pairing Free Certificate Based Signcryption Schemes Using ECQV Implicit Certificates

Certificate-Based Signcryption Scheme without Pairing: Directly Verifying Signcrypted Messages Using a Public Key

Efficient Certificate-Based Signcryption Secure against Public Key Replacement Attacks and Insider Attacks

Contact Info

Product

Resources

About