基于双线性对的可认证密钥协商协议  

Bilinear Pairings-based Authenticated Key Agreement Protocols

作　　者：陈铁明[1,2] 叶敏克[1] 蔡家楣[2] 

机构地区：[1]浙江工业大学软件学院,杭州310032 [2]北京航空航天大学软件开发环境国家重点实验室,北京100083

出　　处：《计算机科学》2008年第11期110-112,共3页Computer Science

基　　金：国家自然科学基金(60673080,60773115);国家863技术专题计划项目(2006AA10Z235);浙江省自然科学基金(Y106290);浙江省科技厅计划项目(2007C21008)等资助

摘　　要：针对Smart等人提出的密钥协商方案存在主密钥托管单点失效安全问题,提出两个新的可认证双线性对密钥协商协议:一个通过向可信第三方获取对方注册的公钥,及实体唯一持有的私钥,实现身份认证和密钥协商;另外直接给出一个无第三方的简单密钥协商方案,先利用椭圆曲线上的数乘实现节点安全认证,再通过双线性对生成会话密钥。最后分析两个协议均满足基本的密钥协商安全属性,并给出协议性能的综合分析。To solve the single point of failure problem as in the master key escow of Smart＇s identity-based protocol, two novel authenticated key agreement prototocols using pairings were proposed. One is a trust authority based scheme. It conducts entity authentication and key agreement using entity＇s registerd open key from the trust party and the entity＇s private key. Another protocol implements a simple but secure key exchange solution without trust authority. Num- ber multiplicative on points over elliptic curves is at first used to guarantee the node authentication, and the bilinear pairing is then combined to exchange the session key. The two proposed protocols satisfy some basic key agreement security attributions, and the respective implementation performance was analyzed at last.

关 键 词：密钥协商 椭圆曲线 双线性对 密钥托管 认证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP309.7[自动化与计算机技术—计算机科学与技术]