基于签密技术的可认证密钥协商协议  

Sign-cryptic Technique Based on Authenticated Key Agreement Protocol

作　　者：张串绒[1] 肖国镇[2] 

机构地区：[1]空军工程大学电讯工程学院,陕西西安710077 [2]西安电子科技大学综合业务网国家重点实验室,陕西西安710071

出　　处：《空军工程大学学报（自然科学版）》2006年第6期65-67,71,共4页Journal of Air Force Engineering University(Natural Science Edition)

基　　金：国家自然科学基金资助项目(J60404290135);"973"计划基金资助项目(G1999035800)

摘　　要：对Zheng的可认证密钥协商协议进行改进,提出基于身份签密的可认证密钥协商协议。该协议具有签密技术的优点,在同一个逻辑步内同时实现了认证和加密两项密码功能,提高了协议的效率;基于身份的公钥密码系统的使用,降低了建立和管理公钥基础设施的代价,用户无需存储、管理和传输公钥及其证书;另外,椭圆曲线上双线性对使协议能以短的密钥和小的计算量实现同等安全要求。文中所提的可认证密钥协商协议具有计算量和传输量小,安全性高的特点。By improvement of Zheng＇s authenticated key agreement protocol, an identity sign - cryptic technique - based authenticated key agreement protocol is proposed. This protocol has the advantage of sign - cryptic technique and achieves the two functions of authentication and encryption in a single logical step. Therefore, it is of high efficiency. Moreover, due to using ID - based public key system, the expense of building and managing public key infrastructure is decreased and the users need not store or transfer public keys and certificate. And again, in our proposed protocol the bilinear pairing on elliptic curve is employed to reach the equivalent security levels with short length key and small computation cost. As a result, the remarkable properties of our authenticated key agreement protocol are low computation cost, narrow bandwidth requirement, and high security level.

关 键 词：密码学 可认证密钥协商 签密 基于身份的公钥系统 双线性对 

分 类 号：TN918.1[电子电信—通信与信息系统]