Comments on 'A Conditional Privacy-Preserving Certificateless Aggregate Signature Scheme in the Standard Model for VANETs'

In the above paper 'A Conditional Privacy-Preserving Certificateless Aggregate Signature Scheme in the Standard Model for VANETs,' a pairing-based certificateless aggregate signature (CLAS) scheme was proposed. However, a malicious-but-passive KGC attack on this scheme was subsequently presented by Shim. In this paper, we show that even if the CLAS scheme is modified to prevent malicious-but-passive KGC attacks by incorporating Shim's countermeasure, there are still weaknesses that allow an adversary to forge aggregate or individual signatures.