NCLAS: a novel and efficient certificateless aggregate signature scheme

Abstract

Aggregate signature algorithms combine n signatures on n different messages from n distinct users into one aggregated signature. The aggregated signature allows the verifier to authenticate the n signatures simultaneously. Because the total signature length and authentication costs are significantly reduced, aggregate signature algorithms are attractive to applications with resource constraints and applications requiring efficient batch authentications. In this paper, we propose a novel aggregate signature scheme based on certificateless‐PKC. Under this novel scheme, the length of the aggregated signature and the pairing computation cost in the aggregate signature verification process are independent of the number of signatures being aggregated. We also prove that the proposed scheme is existentially unforgeable against adaptive chosen‐message and chosen‐identity attacks, based on the hardness assumption of the computational Diffie–Hellman problem. The new scheme will be suitable for resource‐constrained applications. Copyright © 2016 John Wiley & Sons, Ltd.

Certificateless Short Aggregate Signature Scheme for Mobile Devices

“…Gong et al [12] put forward two CLAS schemes and gave the security proofs in a weak model. In order to improve computing efficiency, Zhang and Zhang [30], Zhang et al [29] and Nie et al [19] put forward a CLAS scheme, respectively. In the three schemes, the signers need to share synchronized clocks to generate an aggregate signature.…”

“…In these three schemes [6], [8], [18], each signature contains n + 1 points in G 1 , thus the signature size is (512 × 1001)/8 = 64064 bytes. In the schemes [19], each signature contains 2 points in G 1 and 2 state information, thus the signature size is (512×2+160×2)/8 = 168 bytes. In the new scheme, each signature contains 1 points in G 1 and 1 state information, thus the signature size is (512 + 160)/8 = 84 bytes.…”

A Traceable Concurrent Data Anonymous Transmission Scheme for Heterogeneous VANETs

“…In 2003, the concept of aggregate signature was first introduced by D. Boneh et al in [11]. By taking the advan- tages of certificateless public key cryptosystem (CLC), many certificateless aggregate signature schemes were proposed [12], [13]. An identity based aggregate signature scheme without pairing was then proposed for V2I communication [8].…”