The new scheme requires less computational costs and lower communication than other previous convertible authenticated encryption schemes and the conventional signature-then-encryption approaches.

• 该方案与已有的认证加密方案和传统的签名-加密方案相比具有低计算复杂度和低通信代价。