ISSN 1000-1239 CN 11-1777/TP

Journal of Computer Research and Development ›› 2021, Vol. 58 ›› Issue (10): 2278-2286.doi: 10.7544/issn1000-1239.2021.20210645

Special Issue: 2021密码学与网络空间安全治理专题

Previous Articles     Next Articles

Adaptor Signature Scheme Based on the SM2 Digital Signature Algorithm

Peng Cong1, Luo Min1, He Debiao1, Huang Xinyi2   

  1. 1(School of Cyber Science and Engineering, Wuhan University, Wuhan 430072);2(College of Computer and Cyber Security, Fujian Normal University, Fuzhou 350017)
  • Online:2021-10-01
  • Supported by: 
    This work was supported by the National Natural Science Foundation of China (61972294, 61932016, 62032005), the Key Research and Development Program of Shandong Province (2020CXGC010107), the Special Project on Science and Technology Program of Hubei Provience (2020AEA013), the Natural Science Foundation of Hubei Province (2020CFA052), and the Science and Technology Project of Wuhan Municipal (2020010601012187).

Abstract: The adaptor signature scheme is an extension of the standard digital signature, which can create a “pre-signature” that implies the state of a hard relation (such as discrete logarithm problems) and can be transformed into a completed signature by the witness of the hard relation. The completed signature can be verified by the verification algorithm of a standard signature scheme. Intuitively, an adaptor signature has two properties: 1)only users who know the witness can transform the pre-signature into a completed signature; 2)any user may extract the witness through a pre-signature and a completed signature. Thus, the adaptor signature scheme can provide the atomic exchange property in the blockchain, and has been proved to be very widely used in practice. Based on the SM2 digital signature algorithm, a new adaptor signature scheme (SM2-AS) is constructed in this paper. This scheme can effectively match the SM2 signature scheme’s key generation, signature generation and signature verification algorithms. Moreover, under the random oracle model, we prove that the SM2-AS scheme is secure, that is, it satisfies the pre-signature correctness, pre-signature adaptability, existential unforgeability under chosen plaintext attacks, and witness extractability. Through theoretical analysis and experimental test, the performance of the SM2-AS scheme is comparable to that of ECDSA-based adaptor signature scheme, but obviously weaker than that of the Schnorr-based adaptor signature scheme.

Key words: blockchain technology, payment channel, SM2 signature, adaptor signature, atomic exchange

CLC Number: