Cryptanalysis of Chang et al.´s signature scheme with message recovery

Recently, Chang et al., (2004) proposed a new digital signature scheme with message recovery and claimed that neither one-way hash functions nor message redundancy schemes were employed in their scheme. However, in this letter, two forgery attacks are proposed to show that Chang et al.´s signature scheme is not secure. To resist these attacks, the message redundancy schemes may still be used.