The scheme was proved secure against the active and concurrent attacks in the random oracle model.

• 方案在随机问答器模型下证明是安全的,其不可伪造性等同于CDH(Computational D iffie-Hellman)问题;