Provably Secure Aggregate Signcryption Scheme

Abstract

An aggregate signature scheme is a digital signature scheme that allows aggregation of n distinct signatures by n distinct users on n distinct messages. In this paper, we present an aggregate signcryption scheme (ASC) that is useful for reducing the size of certification chains (by aggregating all signatures in the chain) and for reducing message size in secure routing protocols. The new ASC scheme combines identity‐based encryption and the aggregation of signatures in a practical way that can simultaneously satisfy the security requirements for confidentiality and authentication. We formally prove the security of the new scheme in a random oracle model with respect to security properties IND‐CCA2, AUTH‐CMA2, and EUF‐CMA.

Pairing free identity based aggregate signcryption scheme

“…However, Selvi and others [11 ] presented the security model for unforgeability without introducing the security proof. The scheme proposed in [11 ] cannot be considered an identity based system because the user's public key in Selvi and others’ scheme is not an identity‐based public key [14, 15 ]. Eslami and Pakniat [16 ] proposed certificateless aggregate signcryption based on pairing cryptography with formal security proof.…”

New Construction of Efficient Certificateless Aggregate Signatures

“…Then, CL-PKC can solve the certificate overload as well as the key escrow problem. However, certificateless signature (CLS) is more meaningful in practice, and plenty of researches have also been presented, e.g., [13][14][15][16].…”