針對(duì)一般的認(rèn)證加密方案存在著當(dāng)簽名者否認(rèn)簽名時(shí)，接收者不能使任何驗(yàn)證者證實(shí)簽名者的誠實(shí)性等問題，提出了一種有效的解決方案。該方案與已有的認(rèn)證加密方案和傳統(tǒng)的簽名-加密方案相比具有低計(jì)算復(fù)雜度和低通信代價(jià)。并且在該方案中，如果簽名者否認(rèn)自己的簽名，接收者在不需簽名者的合作下就可將認(rèn)證加密方案轉(zhuǎn)換為一般簽名方案。更重要的是在不暴露消息明文的情況下，任何驗(yàn)證者都可驗(yàn)證簽名的有效性。

Most previous authenticated encryption schemes have a problem that the recipient can not prove the dishonesty to any verifier if the signer denies his signatures. An efficient solving scheme has been presented in this paper. The new scheme requires less computational costs and lower communication than other previous convertible authenticated encryption schemes and the conventional signature-then-encryption approaches. In the proposed scheme, if the signer repudiates the signature, the recipient can convert this signature into an ordinary one without the cooperation of the signer. Furthermore, the message is not disclosed to any verifier during verification.