基于ECDSA的三方口令认证密钥交换协议  

ECDSA-based Password Authenticated Key Exchange Protocol for Three-party

作　　者：王国才[1] 柯福送[1] 王芳[1] 

机构地区：[1]中南大学信息科学与工程学院,长沙410083

出　　处：《计算机工程》2012年第6期153-155,共3页Computer Engineering

基　　金：国家自然科学基金资助项目(60773013)

摘　　要：提出一种基于椭圆曲线数字签名算法(ECDSA)的三方口令认证密钥交换协议。将ECDSA分为公钥生成、签名过程和验证过程3个阶段,在此基础上,设计协议过程、双向认证机制,使任意2个用户通过服务器能进行身份认证和密钥交换。分析结果表明,该协议能降低计算难度和存储开销,抵抗字典攻击和服务器泄露攻击。In order to against dictionary attack and server compromise attack, this paper proposes a Elliptic Curve Digital Signature Algorithm（ECDSA）-based password authenticated key exchange protocol for three-party. ECDSA is divided into public key generation, signature verification process and verification process. On the bases of it, this protocol is divided into six steps, and designs mutual authentication mechanism. And any two clients can accomplish key exchange relying on the server. Analysis results show that this protocol can reduce the calculation difficulty and storage cost, and can resist dictionary attacks and server compromise attack.

关 键 词：口令认证密钥交换 字典攻击 椭圆曲线数字签名算法 重放攻击 

分 类 号：TN918[电子电信—通信与信息系统]