WAPI认证机制的性能和安全性分析  

On the security and performance of WAPI

作　　者：张帆[1] 马建峰[1] 

机构地区：[1]西安电子科技大学计算机网络与信息安全教育部重点实验室,陕西西安710071

出　　处：《西安电子科技大学学报》2005年第2期210-215,共6页Journal of Xidian University

基　　金：国家自然科学基金重大计划(90204012);国家863计划资助(2002AA143021);2003教育部优秀青年教师资助计划;2003教育部科学技术研究重点项目资助

摘　　要：利用BAN类逻辑(WK逻辑),对中国无线局域网安全标准WAPI的认证基础设施WAI进行了形式化分析,指出其无法实现全部的认证及密钥协商目标.进一步分析表明,WAI中存在诸多安全问题,如无法提供身份保护、无法抵抗密钥一致性等攻击、缺乏私钥验证、不能提供如PFS、密钥控制等相应的安全属性等.因此,WAPI无法提供足够级别的安全保护.最后对WAPI与IEEE802 11i在安全性和性能上进行了比较.With BAN-like logic, WAI, the authentication infrastructure of WAPI which is the Chinese WLAN security standard, is analyzed on the security. Results show that WAI is unable to completely realize the authentication and key agreement goals. Further analysis indicates that WAI also has many flaws, such as inability to provide identity protection and resist key consistency attack, lack of private key verification and desirable security attributes like PFS, key control, etc. We conclude that WAPI can not provide a sufficient level of security. Finally, WAPI is compared with IEEE 802.11i about their security and performance.

关 键 词：BAN类逻辑WK 无线局域网 WAPI IEEE 802.11i 认证 密钥协商 

分 类 号：TP393.17[自动化与计算机技术—计算机应用技术]