一种认证密钥协商协议的安全分析及改进  

Analysis and Improvement of a Security-Provable Mutually Authenticated Key Agreement Protocol

作　　者：周永彬[1] 张振峰[1] 冯登国[1] 

机构地区：[1]中国科学院软件研究所

出　　处：《软件学报》2006年第4期868-875,共8页Journal of Software

基　　金：国家自然科学基金~~

摘　　要：针对用于移动通信的可证安全的双向认证密钥协商协议MAKAP给出了一种有效攻击,指出该协议存在安全缺陷,它不能抵抗未知密钥共享攻击.分析了这些安全缺陷产生的原因,并给出了一种改进的协议MAKAP-I.改进后的MAKAP-I协议不但是可证安全的,而且无论从计算开销、通信开销、存储开销以及实现成本等方面,都比原MAKAP协议更高效、更实用.Deng, et al. proposed a security-provable mutually authenticated key agreement protocol MAKAP for mobile communication in 2003. This paper demonstrates by mounting an effective attack against MAKAP that the protocol has security flaws. It is vulnerable against unknown key-share attack. This paper investigates the reasons why such flaws exist and proposes an improved protocol version （called MAKAP-I protocol）. The MAKAP-I protocol is not only provably secure within the random oracle model but also more efficient and practical in terms of computation and communication cost memory requirement and implementation cost, than the original MAKAP protocol.

关 键 词：认证密钥协商协议 未知密钥共享攻击 可证明安全性 移动通信 

分 类 号：TN929.5[电子电信—通信与信息系统]