强安全性的三方口令认证密钥交换协议  

Three-party Password-based Authenticated Key Exchange Protocol with Stronger Security

作　　者：陈勇[1] 王立斌[1] 龚征[1] 

机构地区：[1]华南师范大学计算机学院,广州510631

出　　处：《计算机工程》2012年第19期21-24,29,共5页Computer Engineering

基　　金：国家自然科学基金资助项目"轻量级分组密码算法研究"(61100201);广东高校优秀青年创新人才培养计划基金资助项目(LYM11053)

摘　　要：基于可证明安全的AugPAKE协议,提出一种具有强安全性的三方口令认证密钥交换(3PAKE)协议,协议中避免使用服务器的公钥进行认证,以保证执行效率。安全性分析结果表明,该协议可抵抗字典攻击、服务器泄露攻击等已知攻击,并具有对服务器的密钥保密性以及前向安全性。在随机预言模型下,基于DDH、SDH假设证明了该协议的安全性。Based on the protocol AugPAKE which has been proven security,this paper proposes a strong security Three-party Password-based Authenticated Key Exchange（3PAKE） protocol,which avoids using the server＇s public key to authenticate,and ensures the efficiency.It is proved to be secure against dictionary attacks,server leaked attacks and kinds of known attacks,and also applies key privacy to the server and forward security.The security of the protocol are proved based on Decisional Diffie-Hellman（DDH） problem and Strong Diffie-Hellman（SDH） problem in random oracle model.

关 键 词：口令认证 密钥交换 字典攻击 三方口令认证密钥交换 随机预言模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]