参考文献 ［1］ADI S.Identity-based cryptosystems and signature schemes［J］.Lecture Notes in Computer Science,1984,21(2):47-53. ［2］XUN Yi.An identity-based signature scheme from the weil pairing［J］.IEEE Communications Letters,2003,7(2):76-78. ［3］BARRETO P S L M,MCCULLAGH N,QUISQUATER J J.Efficient and provably-secure identity-based signatures and signcryption from bilinear maps［C］//Proceedings of International Conference on Theory and Application of Cryptology and Information Security.Washington D.C.,USA:IEEE Press,2005:515-532. ［4］BELLARE M,NAMPREMPRE C,NEVEN G.Security proofs for identity-based identification and signature schemes［M］.Berlin,Germany:Springer,2004. ［5］KUROSAWA K,HENG S H.From digital signature to ID-based identification/signature［C］//Proceedings of International Workshop on Public Key Cryptography.Berlin,Germany:Springer,2004:248-261. ［6］DAN B,BEN L,HOVAV S.Short signatures from the weil paring［J］.Journal of Cryptology,2004,17(4):297-319. ［7］CORON J S.Optimal security proofs for PSS and other signature schemes［C］//Proceedings of International Conference on the Theory and Applications of Cryptographic Techniques.Berlin,Germany:Springer,2002:272-287. ［8］GE S.Tight proofs for signature schemes without random Oracles［C］//Proceedings of International Conference on Theory and Applications of Cryptographic Techniques.Berlin,Germany:Springer,2011:189-206. ［9］卢超,钱海峰.标准模型下的在线/离线多签名方案［J］.计算机应用研究,2010,27(9):3514-3517. ［10］胡国政,洪帆.标准模型中可证安全的签名方案［J］.武汉理工大学校报,2009,31(15):130-134. ［11］POINTCHEVAL D,STERN J.Security arguments for digital signatures and blind signatures［J］.Journal of Cryptology,2000,13(3):361-396. ［12］刘振华,张襄松,田绪安,等.标准模型下基于身份的具有部分消息恢复功能的签名方案［J］.北京工业大学学报,2010,36(5):654-658. ［13］WANG Z,CHEN H.Emerging directions in embedded and ubiquitous somputing［M］.Berlin,Germany:Springer,2007. ［14］BELLARE M,ROGAWAY P.The exact security of digital signatures:how to sign with RSA and Rabin［C］//Proceedings of International Conference on Theory and Applications of Cryptographic Techniques.Berlin,Germany:Springer,1996:399-416. ［15］MAURER U M,WOLF S.The relationship between breaking the Diffie-Hellman protocol and computing discrete logarithms［J］.SIAM Journal on Computing,1998,28(5):1689-1721. ［16］SCHNORR C P.Efficient identification and signatures for smart cards［M］.Berlin,Germany:Springer,1989. ［17］LIBERT B,QUISQUATER J J.The exact security of an identity based signature and its applications［EB/OL］.［2016-11-25］.https://eprint.iacr.org/2004/102.pdf. ［18］ABE M,OKAMOTO T.A signature scheme with message recovery as secure as discrete logarithm［J］.IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences,2001,84(1):197-204. 编辑吴云芳