一种无证书认证密钥协商协议的分析与改进  

Analysis and improvement certificateless authenticated key agreement protocol

作　　者：舒剑[1,2] 

机构地区：[1]江西财经大学电子商务系,南昌330013 [2]电子科技大学计算机科学与工程学院,成都611731

出　　处：《计算机应用研究》2012年第1期294-296,共3页Application Research of Computers

基　　金：国家"863"计划资助项目(2009AA012415)

摘　　要：研究无证书公钥密码系统中两方认证密钥协商协议问题。对Liu xu的无证书两方认证密钥协商协议进行安全性分析,指出该方案不具有强安全性。该方案不能抵抗密钥泄露伪装攻击和临时私钥泄露攻击。分析了方案不安全的原因,在此基础上提出一个改进的方案来修正Liu xu的方案。因此,设计看似安全的无证书两方认证密钥协商协议并不困难,但要给出协议的安全性证明并不容易。This paper studied two-party authenticated agreement protocol in the certificateless public setting.Analyzed the security of Liu-xu＇s certificateless authenticated two-party key agreement protocol,and it was shown that the scheme did not achieve strong security.The scheme was vulnerable to key compromise impersonation attack and leakage of ephemeral secrets attack.The reason why the attack can work was analyzed and proposed an improved scheme to remove the attack.It is not hard to devise certificateless authenticated two-party key agreement protocols that look secure,but making the proofs word is not always so simple.

关 键 词：认证 密钥协商 无证书密码学 强安全性 密钥泄露 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]