Robust ID-based threshold signcryption scheme from pairings

Abstract

Recently bilinear pairings on elliptic curves have raised great interest in cryptographic comnmnity. BaKed oi, their good properties, many excellent ID-based cryptographic schemes have been proposed. However, in these proposed schemes, the private key generator should be assumed trusted, while in real environment, this assumption does not always hold. To overcome this weakness, in this paper, we will use the threshold technology to devise a secure ID-based signcryption scheme. Since tile threshold technology ks adopted not Olfly in the master key management but also in the group signature, our schelne can achieve high security and resist solne malicious attacks under a certain threshold.

Analysis and improvement of authenticatable ring signcryption scheme

“…[4,6,7,8,16,19]. In addition, many variations of ID-based signcryption were proposed, for examples, IDbased proxy signcryption [13,15,26], ID-based threshold signcryption [10,17,18,21] and unsigncryption [14], and ID-based blind signcryption [27].…”

An efficient and provably secure ID-based threshold signcryption scheme

“…In 2004, Duan et al [12] proposed an ID-based threshold signcryption scheme by combining the concepts of ID-based threshold signature and signcryption together. However, in Duan et al's scheme [12], the master-key of the PKG is distributed to a number of other PKGs, which creates a bottleneck on the PKGs.…”

“…However, in Duan et al's scheme [12], the master-key of the PKG is distributed to a number of other PKGs, which creates a bottleneck on the PKGs. In 2005, Peng and Li [26] proposed an ID-based threshold signcryption scheme based on Libert and Quisquater's ID-based signcryption scheme [19].…”

“…That is, anyone who obtains the sender's private key can recover the original message of a signcrypted text. In addition, both Duan et al's scheme [12] and Peng and Li's scheme [26] do not consider the formal models and security proofs. Ma et al [21] also proposed a threshold signcryption scheme using the bilinear pairings.…”

“…Recently, two identity-based threshold signcryption schemes [12], [26] have been proposed by combining the concepts of identitybased threshold signature and signcryption together. However, the formal models and security proofs for both schemes are not considered.…”