eCK模型下可证明安全的双方认证密钥协商协议  

Provably Secure Two-Party Authenticated Key Exchange Protocol in eCK Model

作　　者：赵建杰[1] 谷大武[2] 

机构地区：[1]上海交通大学信息安全工程学院,上海200240 [2]上海交通大学计算机科学与工程系,上海200240

出　　处：《计算机学报》2011年第1期47-54,共8页Chinese Journal of Computers

基　　金：国家"八六三"高技术研究发展计划项目基金(2006AA01Z405)资助

摘　　要：如何构造安全的密钥协商协议是信息安全领域富有挑战性的问题之一.然而目前多数安全协议只能达到"启发式"安全,协议的安全性假设和效率也不够理想.针对这些问题,文中提出了一种新的两轮双方认证密钥协商协议,通过分析新协议的安全属性指出了构造双方认证密钥协商的一些原则.随后,在eCK模型下对新协议进行了严格的形式化证明,根据相关文献,eCK模型是目前关于双方密钥协商协议的安全程度最高的形式化模型.性能分析表明,新协议较好地平衡了计算量和安全性假设这两个协议评价指标.另外,为了实现新协议的密钥确认属性,文中提出了一种三轮变体协议.How to construct secure key agreement protocol is one of the most challenging proh lems in information security area. However, most of the current secure protocols can only achieve ＂heuristic＂ security, the security assumptions and effieiencies of these protocols are not perfect. To solve these problems, the authors propose a new 2 rounds two-party authenticated key agree- ment protocol and point out some principles to construct a secure protocol by analyzing the security properties of the protocol, then prove strictly that the new protocol is secure in eCK model. According to pertinent literature, eCK model provides the strongest definition of security for two party key agreement protocol at present. Performance analysis shows that the protocol has a good balance between computational cost and security assumption. The authors also present a threeround variant of the protocol to realize key conformation property.

关 键 词：密码学 认证密钥协商 可证明安全 eCK模型 密钥确认 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]