对Yahalom-Paulson协议的分析与改进  

Analysis of Yahalom-Paulson protocol and its improvement

作　　者：陆超[1] 周颢[1] 赵保华[1] 

机构地区：[1]中国科学技术大学计算机科学技术系,安徽合肥230027

出　　处：《中国科学技术大学学报》2010年第1期98-102,共5页JUSTC

基　　金：国家自然科学基金重大研究计划(90104010);国家自然科学基金(60241004);国家重点基础研究发展(973)计划(2003CB314801)资助

摘　　要：对原始Yahalom-Paulson协议和Backes与Pfitzmann的简化Yahalom-Paulson协议进行分析,指出各自协议中存在的漏洞.原始协议中存在类型缺陷攻击,简化协议中存在重放攻击导致协议参与实体间会话密钥不一致.对Yahalom-Paulson协议作出改进并使用串空间理论证明改进后协议的正确性.A detailed analysis of the original Yahalom-Paulson protocol and its simplified version given by Backes and Pfitzmann was presented.It was found that there exists a type flaw attack on the original one and the simplified one can not guarantee the agreement on new session keys between legitimate parties due to replay attacks.The protocol was adapted and the new version was proved correct based on strand space theory.

关 键 词：Yahalom-Paulson协议 类型缺陷攻击 串空间 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]