一种两方认证密钥协商方案的分析与改进  

Analysis and improvement of two-party key authenticated agreement scheme

作　　者：舒剑[1,2] 

机构地区：[1]江西财经大学电子商务系,南昌330013 [2]电子科技大学计算机科学与工程学院,成都611731

出　　处：《计算机应用研究》2011年第12期4660-4662,共3页Application Research of Computers

基　　金：国家"863"高技术研究发展计划基金资助项目(2009AA012415)

摘　　要：基于签密方案,Liu-Xu利用椭圆曲线群构造了一种高效、强安全的两方认证密钥协商协议。对Liu-Xu提出的方案进行安全性分析,指出该方案不具有强安全性。该方案不能抵抗临时私钥泄露攻击,并且方案不具有完美前向安全的特性。分析了方案不安全的原因在于传送的消息存在冗余,并在此基础上提出一种改进的方案来修正Liu-Xu的方案。Based on signcryption scheme, Liu-Xu proposed an efficient and strong secure two-party key agreement protocol, which worked in an elliptic curve group. Security analysis showed that the scheme did not achieve strong security. The protocol, however, was susceptible to leakage of ephemeral secrets attack, and couldn＇ t provide perfect forward security. Accordingly, the current paper demonstrated the vulnerability of Liu-Xu＇ s protocol against such attacks due to redundancy of the exchange messages, and then presented an improved protocol in order to resolve such problems.

关 键 词：签密 椭圆曲线 强安全性 完美前向安全 冗余 

分 类 号：TN918.1[电子电信—通信与信息系统]