无双线性对的基于身份的认证密钥协商协议  

An Identity-Based Authenticated Key Agreement Protocol without Bilinear Pairing

作　　者：曹雪菲[1] 寇卫东[1] 樊凯[1] 张军 

机构地区：[1]西安电子科技大学ISN国家重点实验室,西安710071 [2]Schoole of Computer Science and Software Engineering,University of WoUongong,WoUongong,NSW 2522

出　　处：《电子与信息学报》2009年第5期1241-1244,共4页Journal of Electronics & Information Technology

基　　金：教育部高校博士点基金(2004071001)资助课题

摘　　要：鉴于目前大多数基于身份的认证密钥协商(ID-AK)协议需要复杂的双线性对运算,该文利用椭圆曲线加法群构造了一个无双线性对的ID-AK协议。协议去除了双线性对运算,效率比已有协议提高了至少33.3%;同时满足主密钥前向保密性、完善前向保密性和抗密钥泄露伪装。在随机预言机模型下,协议的安全性可规约到标准的计算性Diffie-Hellman假设。Most available Identity-based Authenticated Key agreement （ID-AK） protocols require expensive bilinear pairing operation. This paper proposes a pairing-free ID-AK protocol from additive elliptic curve group. The new protocol eliminates the pairing operations, and reduces overall computation time by at least 33.3 percent compared with previous ID-AK protocols. The new protocol also satisfies master key forward secrecy, perfect forward secrecy and key compromise impersonation resilience. The security of the proposed protocol can be reduced to the standard Computational Diffie-Hellman assumption in the random oracle model.

关 键 词：基于身份的密码体制 认证的密钥协商 前向保密性 双线性对 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]