带认证邮局协议的密钥恢复攻击  

Password Recovery Attack to Authentication Post Office Protocol

作　　者：刘凡保[1] 谢涛[1] 冯登国[2] 

机构地区：[1]国防科学技术大学计算机学院,长沙410073 [2]中国科学院信息安全国家重点实验室,北京100190

出　　处：《计算机学报》2012年第9期1927-1937,共11页Chinese Journal of Computers

基　　金：国家核高基重大专项课题(2010ZX01037-001-001);国家"九七三"重点基础研究发展规划项目基金(2007CB311202);国家自然科学基金(61070228)资助~~

摘　　要：作者提出了一种新的针对带认证邮局协议的密钥恢复攻击,能够更快地恢复出密钥并能够恢复更多的密钥字符.基于通道技术和高级消息修改技术,提出了一种"群满足方案"来确定性地满足分而治之策略下最后一个通道首三步的所有充分条件,籍此提高MD5(Message Digest Algorithm 5)碰撞对搜索的效率.并提出了一些新的通道来控制MD5碰撞对消息的更多比特的取值,比如可以构造出352比特值确定的MD5碰撞对.通过这些技术改进了多位信息确定的MD5碰撞对搜索效率,应用到APOP的密钥恢复攻击中不仅能够快速恢复长达31个字符的密钥,而且能够在实际时间内恢复长达43个字符的密钥.In this paper, we propose a new password recovery attack to Authentication Post Office Protocol（APOP）, which can recover more password characters and faster. First, based on tunnel and advanced message modification technologies, we propose a ＂Group Satisfaction Scheme＂to satisfy determinately all conditions of the first three successive steps of the last tun- nel, to further improve Message Digest Algorithm 5 （MD5） collision searching efficiency. Sec- ond, we propose some new tunnels to generate more meaningful characters during MD5 collision searching; for example, we can construct an MD5 collision pair with as many as 352 fixed bits. Combining with these technologies, we can improve the efficiency of MD5 collision searching with high number of chosen bits, hence, we can recover APOP passwords with 31 characters extreme- ly fast, and can also recover passwords as long as 43 characters in practical time.

关 键 词：带认证邮局协议 挑战和响应 密钥恢复 通道 群满足方案 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]