Security Analysis of Digital Signature Scheme with Message Recovery using Self-Certified Public Keys
Tseng and his colleagues have proposed two variants of authenticated encryption scheme using self-certified public keys. Their schemes have two fundamental properties. Only the intended receiver can recover the message while verifying the signature, and each user can use his own private key independently without system authority learning about it. This paper presents man-in-the-middle attacks to both Tseng and his colleagues authenticated encryption variants. It will be shown that these schemes are not secure against this attack.
Y.-H. Chen and J.-K. Jan. “An authenticated encryption scheme for securely signing a signature with message linkages”, International Conference on Innovative Computing, Information and Control, pp. 77-80, 2007.
T. ElGamal. “A public key cryptosystem and a signature scheme based on discrete logarithms”, IEEE Trans. Inform Theory 31 (4), pp. 469-472, 1985.
L. H. Encinas and A.M Rey and J.M. Masque. “A Weakness in Authenticated Encryption Schemes Based on Tseng et al.’s schemes”, vol. 7, no. 2, pp. 185-187, 2008.
M. Girault. “Self-certified public keys”, Advances in CryptologyEUROCRYPT’91, Springer, Berlin, 1991, pp. 491-497.
P. Horster and M. Michels and H. Petersen. “Authenticated encryption schemes with low communication costs”, Electronic Letters 30 (15), pp. 1212-1213, 1994.
M. S. Hwang and J. Y. Hsiao and Y.-P. Chu. “Improvement of authenticated encryption schemes with message linkages for message flows”, IEICE Trans. Inf. & Syst., vol. E89-D, no.4, pp. 1575-1577, 2006.
K. Neyberg and R. Ruppel. “Message recovery for signature schemes based on the discrete logarithm problem”, Advances in CryptologyErocryt’94, LNCS 950, Springer, Berlin, 1994, pp.175-190.
M. Rasslan. “Cryptanalysis of Hwang-Lo-Hsiao-Chu Authenticated Encryption Schemes”, IEICE Trans. Inf. & Syst., vol. E93-D, no.5, pp. 1301-1302, 2010.
Z. Shao. “Improvement of digital signature with message recovery using self-certified public keys and its variants”, Applied Mathematics and Computation 159, pp. 391-399, 2004.
C.-s. Tsai and S.-C. Lin and M.-S. Hwang. “Cryptanalysis of an authenticated encryption scheme using self-certified public keys”, Applied Mathematics and Computation 166, pp. 118-122, 2005.
Y.-M. Tseng and J.-K. Jan and H.-Y. Chien. “Digital signature with message recovery using self-certified public keys and its variant.” Applied Mathematics and Computation 136, pp. 203-214, 2003.
Q. Xie and Y. Xiu. “Cryptanalysis of Tseng et al.’s authenticated encryption schemes”, Applied Mathematics and Computation 158, pp. 1-5, 2004.
Zh. Zhang and F. Feng, F. “Cryptanalysis of some signature schemes with message recovery”, Applied Mathematics and Computation 170, pp.103-114, 2005.
Authors who submit papers with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).
- By submitting the processing fee, it is understood that the author has agreed to our terms and conditions which may change from time to time without any notice.
- It should be clear for authors that the Editor In Chief is responsible for the final decision about the submitted papers; have the right to accept\reject any paper. The Editor In Chief will choose any option from the following to review the submitted papers:A. send the paper to two reviewers, if the results were negative by one reviewer and positive by the other one; then the editor may send the paper for third reviewer or he take immediately the final decision by accepting\rejecting the paper. The Editor In Chief will ask the selected reviewers to present the results within 7 working days, if they were unable to complete the review within the agreed period then the editor have the right to resend the papers for new reviewers using the same procedure. If the Editor In Chief was not able to find suitable reviewers for certain papers then he have the right to reject the paper.
- Author will take the responsibility what so ever if any copyright infringement or any other violation of any law is done by publishing the research work by the author
- Before publishing, author must check whether this journal is accepted by his employer, or any authority he intends to submit his research work. we will not be responsible in this matter.
- If at any time, due to any legal reason, if the journal stops accepting manuscripts or could not publish already accepted manuscripts, we will have the right to cancel all or any one of the manuscripts without any compensation or returning back any kind of processing cost.
- The cost covered in the publication fees is only for online publication of a single manuscript.