高效的匿名的基于口令的认证密钥协商协议  

Efficient anonymous password-based authenticated key exchange scheme

作　　者：谭示崇[1] 庞辽军[1] 苏万力[1] 王育民[1] 

机构地区：[1]西安电子科技大学计算机网络与信息安全教育部重点实验室,陕西西安710071

出　　处：《通信学报》2009年第4期17-20,共4页Journal on Communications

基　　金：国家高技术研究发展计划("863"计划)基金资助项目(2007AA01Z435);国家自然科学基金资助项目(60772136;60473027);高等学校学科创新引智计划基金资助项目(B08038)~~

摘　　要：基于口令的密钥协商协议可以为网络上仅共享一个口令的通信双方建立会话密钥。提出了一个基于口令的认证密钥协商协议,并且对所提出的协议安全性进行了分析,分析结果表明该协议在计算性Diffie-Hellman假设下,可以抵抗字典攻击。该协议能够为用户提供隐私保护并且实现非关联性,而且,该密钥协商协议能够抵抗拒绝服务攻击。Password-based key exchange schemes was designed to provide entities communicating over a public network, and only sharing a （short） password with a session key （e.g., the key was used for data confidentiality and/or integrity）. There has been much interest in password-authenticated key exchange protocol which remains secure even when users choose passwords from a small space of possible passwords, such as a dictionary of English words. A password-based authenticated key exchange scheme was proposed. The analysis shows that the scheme is secure against dictionary attack under the computational Diffie-Hellman intractability assumption, and preserves user privacy and achieves unlinkability. Furthermore, since denial-of-service （DOS） attacks have become a common threat,DoS-resistantance is a design consideration and the scheme is proved to be secure against denial-of-service attacks.

关 键 词：密钥协商 匿名性 拒绝服务攻击 字典攻击 

分 类 号：TN918.1[电子电信—通信与信息系统]