A signature generated by the scheme is in the size of about 160bits,which is as short as BLS short signature scheme.

• 基于大整数分解的困难性,该方案在选择消息攻击下是存在不可伪造的。