Cryptanalysis of SP2DAS and 3PDA, Two Data Aggregation Schemes for Smart Grid

This paper analyses the security of two recently proposed privacy preserving data aggregation schemes, called SP2DAS and 3PDA. We show that, for both of these protocols, despite the designers' claims, there are efficient forgery attacks on the signature schemes used in. We present a selective forgery attack on the signature scheme of SP2DAS in the key-only attack model and a selective forgery attack on the 3PDA's signature scheme in the known-message attack model, requiring only two pairs of message-signature. Our results show that in both of these schemes, the attacker can inject any arbitrary faulty data into the data aggregated by the network, without being detected, which is a serious threat to the performance of the whole network.