Generic Construction of Certificateless Signature

Abstract

To provide the binding between a user and his public key, traditional digital signature schemes use certificates that are signed by a trusted third party. While Shamir's identity-based signature scheme can dispense with certificates, the key escrow of a user's private key is inherent in the identity-based signature scheme. In Asiacrypt 2003, a new digital signature paradigm called the certificateless signature was introduced. The certificateless signature eliminates the need for certificates and does not suffer from the inherent key escrow problem. In this paper, we provide a generic secure construction of a certificateless signature. We also present an extended construction whose trust level is the same as that of a traditional public key signature scheme.

CBE from CL-PKE: A Generic Construction and Efficient Schemes

“…Since any certifying information can always be sent along with the actual signature, this concept seems less useful than that of CBE. Yum and Lee [11] gave a generic construction or a certificateless signature scheme from an ID-based signature scheme, proving the former to be secure (in an appropriate model) if the latter is. These authors also considered a generic construction for CL-PKE from identity-based encryption (IBE) [10] and the relationships between IBE, CBE and CL-PKE [12].…”

A Certificate less Multiple-key Agreement Protocol without Hash Functions Based on Bilinear Pairings

“…In this cryptosystem, the private key consists of two parts which one of them is made by the user and the other is made by KGC. Up to now, various types of certificateless cryptographic primitives as encryption functions [20], signature schemes [21], key agreement protocols [19] and so on, have been designed.…”

On Constructing Certificateless Cryptosystems from Identity Based Encryption

“…A subsequent work of Yum and Lee considered the relations between identity-based (IBE), certificate based (CBE) and certificateless encryption schemes (CLE) and established a result of essential equivalence [31] between the three primitives but this result does not hold for the strongest security model developed in [2] for CLE schemes. The same authors also proposed generic constructions of certificateless signatures [30] and encryption schemes [29] but only established the security of their designs in security models that are seemingly undermined w.r.t. the original model considered in [2] for the public key encryption case.…”