安全的认证密钥协商协议研究  

Research on safe authenticated key agreement protocol

作　　者：桑国钧[1] 

机构地区：[1]上海交通大学软件学院,上海200050

出　　处：《信息技术》2010年第7期82-86,89,共6页Information Technology

摘　　要：对基于证书的密钥协商协议的设计与分析进行了比较深入的研究,研究内容包括:可证明安全的基于证书的密钥协商协议以及一种新的可认证密钥协商协议。主要研究成果有:介绍了密钥协商协议的概念和安全特性;提出一个新的认证密钥交换协议AKE-1。AKE-1效率较高,并且在最新的eCK07模型下是安全的,证明基于随机预言假设和CDH假设。另外,基于AKE-1,提出一轮的变体(满足只有一个实体在线)和三轮的变体(提供密钥确认属性),以满足不同的应用。This paper made a comparatively deep research on the provably secure authentication and key exchange,which includes the study of provably secure certificate-based two-party authenticated key agreement protocol.The main results are as following：It introduced some common attacks to secure key agreement protocols,the concept and the security property of secure protocol.It presented a new authenticated key exchange（AKE） protocol named AKE-1.The proposal is efficient and proven to be secure in newly enhanced Canetti-Krawczyk（eCK07） model under the random oracle assumption（ROM） and the computational Diffie-Hellman（CDH） assumption.In addition,the paper presented a one-pass variant（for only one entity on line） and three-pass variant（providing key confirmation） of AKE-1 for different applications.

关 键 词：密钥协商协议 安全模型 认证密钥交换协议 

分 类 号：TN918[电子电信—通信与信息系统]