Comments on “A Secure and Efficient Data Integrity Verification Scheme for Cloud-IoT Based on Short Signature”

Many business organizations make use of sensors to collect information from vantage points of various sites, and store them in the cloud storage servers. In this case, the sensor devices act as separate data collectors and connect themselves to the cloud forming Internet of Things (IoT) framework. Very recently, a famous and a notable work based on short signature algorithm was put forward by Zhu and others in 2019 [5] and the authors have claimed that, their work is computationally efficient than Wang et al.'s work proposed in 2013 [6]. Through extensive security analysis using the relevant random oracle model, the authors have claimed that, their work is provably secure against any malicious cloud server. But, through the carefully review of the existing scheme, we succeed in proving that, this work is susceptible to message forgery attack by a semi-trusted cloud server. Thus, there is chance for a malicious cloud server to pass the test without the possession of the sensitive data files updated by the sensor nodes.