标准模型下强安全的无证书认证密钥协商协议  

Strongly Secure Certificateless Authenticated Key Agreement Protocol in Standard Model

作　　者：张延红[1] 陈明[2,3] 

机构地区：[1]河南城建学院计算机科学与工程系,河南平顶山467036 [2]宜春学院数学与计算机学院,江西宜春336000 [3]重庆大学计算机学院,重庆400044

出　　处：《四川大学学报（工程科学版）》2013年第1期125-132,共8页Journal of Sichuan University (Engineering Science Edition)

基　　金：国家自然科学基金资助项目(90818028);河南省重点科技攻关资助项目(102102210020);重庆市国土资源和房屋管理局项目(KJ2011010)

摘　　要：现有无双线性对的无证书密钥协商(CL-AKA)协议要么存在已知安全缺陷,要么是在弱安全模型下可证安全。为了增强安全性,将Lippold的9类安全策略分别映射为求解9个CDH问题。在Zhang的安全模型基础上,扩展定义了会话临时秘密查询和3类新鲜预言机,提出了增强的CL-AKA协议随机预言机模型。增强模型实现了模拟密钥泄露伪装、会话临时秘密泄露和完美前向安全属性。基于上述研究,提出一种强安全的无证书认证密钥协商协议,仅需要9次椭圆曲线上的点乘运算。新协议在增强模型下是可证明安全的。对比分析表明,新协议不仅具有强安全性,而且计算开销较低,可用于构建安全移动通信环境。Based on Zhang＇ s security model, an improved pairing-free certificateless key agreement , CL-AKA random oracle model, was proposed. An ephemeral-secret query and three types of fresh oracles were further defined in the improved CL-AKA random oracle model to achieve the simulation of key-compromise impersonation, disclosure of ephemeral secrets and perfect forward secrecy. A CLAKA protocol with strong security was proposed, costing only 9 scalar multiplications on the elliptic curve. The secure of the new protocol was proved in the improved model. The comparative analysis pointed out that the new protocol with strong security and low computing costs can be used to build secure mobile communication environment.

关 键 词：无证书密码体制 认证密钥协商 计算diffie-hellman假设 标准模型 公钥替换 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]