On the Authentication of One Popular Signcryption Scheme.
Zhengjun Cao · 2007
Abstract Whether a recipient can prove a signature to others is of great importance. The function is just one reason that we call a signature “signature ” rather than others. In this paper, we point out that one popular signcryption signature convinces only the designated document’s recipient that the signer deliberately signed the document. The designated recipient can check the validity of a given signcryptext but cannot prove it to others. We also improve it using the efficient technique developed in Schnorr’s signature instead of a zero-knowledge proof such that the receiver can check the validity of a given signcryptext and can prove it to a third party.