Kerberos认证协议的研究及其优化  

Study and improvement of Kerberos authentication protocol

作　　者：陈云[1] 高静[2] 邓亚平[1] 

机构地区：[1]重庆邮电大学计算机科学与技术学院,重庆400065 [2]重庆邮电大学通信与信息工程学院,重庆400065

出　　处：《重庆邮电大学学报（自然科学版）》2006年第z1期206-209,共4页Journal of Chongqing University of Posts and Telecommunications(Natural Science Edition)

摘　　要：比较了改进后的Kerberos认证协议与原来Kerberos认证协议,指出了Kerberos主要改进的地方,给出了采用了AES加密算法取代DES的性能对比。在此基础上提出了将公钥密码体制RSA与对称密码体制AES引入到Kerberos认证协议中。这种方法不仅解决了Kerberos认证协议中密钥分配和管理问题,而且提高了Kerberos认证协议的安全性,使其遭受口令攻击的危险得到降低。This paper compared improved Kerberos network authentication system protocol with formerly version, points out the improvement and its limitation. The difference between advance encrypt standard (AES) and data encrypt standard (DES) used in Kerberos system is compared. This paper also optimizes the Kerberos with public key system (RSA) and symmetry encrypt system (AES) , which can better solve the problem of key distribution and management. And the security of Kerberos is improved by avoiding password attacks.

关 键 词：KERBEROS RSA AES RIJNDAEL 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]