On the security of generalization of threshold signature and authenticated encryption
In 2000, Wang et al. proposed a new (t, n) threshold signature scheme with (k, l) threshold shared verification. Meanwhile, integrating the idea of message recovery, the), also proposed a (t, n) threshold authenticated encryption scheme with (k, l) threshold shared verification. However, this article will show that both proposed schemes are insecure, because any malicious attacker can obtain the group secret keys from two valid threshold signatures. Thus, the attacker may solely forge or verify a threshold signature. An improvement to overcome the attacks is proposed.
threshold signature authenticated encryption cryptography group-oriented cryptography