The present invention discloses a digital signature scheme based on braid
group conjugacy problem and a verifying method thereof, wherein a
signatory S selects three braids x.epsilon.LB.sub.m(l),
x'.epsilon.B.sub.n(l), a.epsilon.B.sub.n(l), and considers braid pair
(x',x) as a public key of S, braid a as a private key of S; Signatory S
uses hash function h for a message M needing signature to get
y=h(M).epsilon.B.sub.n(l); generating a braid b.epsilon.RB.sub.n-1-m(l)
randomly, then signing M with a and b to obtain
Sign(M)=a.sup.-1byb.sup.-1a; a signature verifying party V obtains the
public key of S, calculating the message M by employing hash function h,
obtaining the y=h(M); judging whether sign(M) and y, sign(M)x' and xy are
conjugate or not, if yes, sign(M) is a legal signature of message M; the
present invention reduces the number of braids involved and the number
for conjugacy decision without reducing security, thereby improving the
operation efficiency of signature.