对TAKA_(SIP)协议的分析和改进  

Cryptanalysis and improvement of TAKA_(SIP) protocol

作　　者：唐宏斌[1] 刘心松[1] 

机构地区：[1]电子科技大学计算机科学与工程学院,成都610054

出　　处：《计算机应用》2012年第2期468-471,共4页journal of Computer Applications

摘　　要：会话初始化协议(SIP)提供了认证和协商会话密钥,能保证后续会话的安全。2010年,Yoon等(YOONE-J,YOO K-Y.A three-factor authenticated key agreement scheme for SIP on elliptic curves.NSS'10:4th InternationalConference on Network and System Security.Piscataway:IEEE,2010:334-339)提出一种新的三要素SIP认证密钥协商协议TAKASIP。但TAKASIP协议不能抵抗内部攻击、服务器伪装攻击、离线口令猜测攻击、身份冒充攻击和丢失标记攻击,并且没有提供双向认证。在TAKASIP协议基础上提出一种基于椭圆曲线密码三要素SIP认证协议ETAKASIP以解决上述问题。ETAKASIP基于椭圆曲线离散对数难题和椭圆曲线密码系统,提供了高安全性。该协议只需7次椭圆曲线点乘运算、1次椭圆曲线加法运算和最高6次哈希运算,有较高的运算效率。Session Initiation Protocol （SIP） provides authentication and session key agreement to ensure the security of the successive session. In 2010, Yoon et al, （ YOON E-J, YOO K-Y. A three-factor authenticated key agreement scheme for SIP on elliptic curves. NSS ＇10： 4th International Conference on Network and System Security. Piseataway： IEEE, 2010：334 - 339. ） proposed a three-factor authenticated key agreement scheme named TAKAsw for SIP. However, the scheme is vulnerable to insider attack, server-spoofing attack, off-line password attack, and losing token attack. Moreover, it does not provide mutual authentication. To overcome these flaws of TAKAsip, a new three-factor authentication scheme named ETAKAsip based on Elliptic Curve Cryptosystem （ECC） was proposed. ETAKAsip, on the basis of elliptic curve discrete logarithm problem, provides higher security than TAKAsip. It needs 7 elliptic curve scalar multiplication operations, 1 additional operation and up to 6 Hash operations, and of high efficiency.

关 键 词：密码学 认证协议 椭圆曲线密码系统 密钥协商 会话初始化协议 

分 类 号：TN915.04[电子电信—通信与信息系统]