一種有效的可轉(zhuǎn)換的認證加密方案

針對一般的認證加密方案存在著當(dāng)簽名者否認簽名時，接收者不能使任何驗證者證實簽名者的誠實性等問題，提出了一種有效的解決方案。該方案與已有的認證加密方案和傳統(tǒng)的簽名-加密方案相比具有低計算復(fù)雜度和低通信代價。并且在該方案中，如果簽名者否認自己的簽名，接收者在不需簽名者的合作下就可將認證加密方案轉(zhuǎn)換為一般簽名方案。更重要的是在不暴露消息明文的情況下，任何驗證者都可驗證簽名的有效性。

Most previous authenticated encryption schemes have a problem that the recipient can not prove the dishonesty to any verifier if the signer denies his signatures. An efficient solving scheme has been presented in this paper. The new scheme requires less computational costs and lower communication than other previous convertible authenticated encryption schemes and the conventional signature-then-encryption approaches. In the proposed scheme, if the signer repudiates the signature, the recipient can convert this signature into an ordinary one without the cooperation of the signer. Furthermore, the message is not disclosed to any verifier during verification.