Open Access. Powered by Scholars. Published by Universities.®
Physical Sciences and Mathematics Commons™
Open Access. Powered by Scholars. Published by Universities.®
Articles 1 - 2 of 2
Full-Text Articles in Physical Sciences and Mathematics
The Insecurity Of Two Proxy Signcryption Schemes: Proxy Credential Forgery Attack And How To Prevent It, Jyh-Haw Yeh
The Insecurity Of Two Proxy Signcryption Schemes: Proxy Credential Forgery Attack And How To Prevent It, Jyh-Haw Yeh
Computer Science Faculty Publications and Presentations
Securing different online e-business activities usually requires applying different cryptographic algorithms. The proxy signcryption algorithms are designed for applications such as online proxy auction or online proxy signatures on business contracts, which require a proxy agent to sign on confidential messages. This paper proposes a proxy credential forgery attack to two recent proxy signcryption schemes in the literature. Using the attack, a malicious proxy signer can create a fake proxy credential from his original credential to extend his signing power. Simple modifications to these two schemes are also provided in this paper to prevent the attack without adding too much …
P2p Email Encryption By An Identity-Based One-Way Group Key Agreement Protocol, Jyh-Haw Yeh, Fiona Zeng, Thomas Long
P2p Email Encryption By An Identity-Based One-Way Group Key Agreement Protocol, Jyh-Haw Yeh, Fiona Zeng, Thomas Long
Computer Science Faculty Publications and Presentations
As a result of high-tech companies such as Google, Yahoo, and Microsoft offering free email services, email has become a primary channel of communication. However, email service providers have traditionally offered little in the way of message privacy protection. This has made emails, of which billions are sent around the world on any day, an attractive data source for personal identity information thieves. Google was one of the first companies to provide substantial email privacy protection when they began using the HTTPS always-on option to encrypt messages sent through their email service, Gmail. Unfortunately, Gmail's encryption option does not offer …