On the Security of a Blockchain-Based Certificateless Anonymous Aggregate Signcryption Scheme for Edge Computing

作者：Fei Zhu, Minxuan Huang, Tao Peng · 发表于：IEEE Transactions on Vehicular Technology · 年份：2026 · DOI：10.1109/tvt.2026.3675641

To ensure the secure exchange of information in the advanced traffic information service (ATIS) system, various signcryption schemes were proposed. Recently, a blockchain-based certificateless anonymous aggregate signcryption (BCAAS) scheme [IEEE Trans. Veh. Technol., doi=10.1109/TVT.2025.3585419] was proposed for edge computing-based ATIS. Although the design was claimed to be secure, in this comment work, we reveal that the design fails to achieve unforgeability, the most significant property that a signcryption scheme should achieve. In particular, we show that a malicious-but-passive key generation center is capable of forging a valid signature on any fraudulent message. This attack allows the attacker to impersonate an honest vehicle to broadcast fraudulent information about road conditions, causing traffic safety problems. We also discuss our reason for the attack and present relevant suggestions for improvement.