摘要： 2000年，Popescu C提出了一个Tseng-Jan群签名方案的修改方案。该文对该方案作了分析，指出该方案优越于Tseng-Jan方案，签名内容泄露不了任何有关秘密参数的信息，但它仍存在漏洞：(1)群成员可以单独构造密钥对；(2)群成员可以联合构造密钥对。从而伪造有效的群签名，因此该方案是不安全的。

关键词: 群签名, 证书, 密钥对

Abstract: C.Popescu presented a modification of the Tseng-Jan group signature scheme in 2000. The scheme appears to be secure in comparison with the Tseng-Jan scheme: The message's group signature cant reveal any information about the subscribers secret key, but there are several leaks: (1) Each group member can construct a secret-key pair by himself; (2) Group members can construct a secret-key pair jointly, thereby making a valid group signature for any message. So this scheme is still insecure.

中图分类号: 

• TP393.08