基于格的三方口令认证密钥交换协议  

Password Authenticated Key Exchange Protocol in the Three Party Setting Based on Lattices

作　　者：叶茂[1] 胡学先[1] 刘文芬[1] 

机构地区：[1]解放军信息工程大学,郑州450002

出　　处：《电子与信息学报》2013年第6期1376-1381,共6页Journal of Electronics & Information Technology

基　　金：国家973计划项目(2012CB315905)资助课题

摘　　要：为抵抗量子攻击,格理论被广泛应用于各种密码体制的设计。目前基于格的口令认证密钥交换协议(PAKE)都是针对两方设计的,不能满足大规模通信系统的应用需求。该文在Gorce-Katz两方PAKE框架基础上提出了一个基于格的三方PAKE协议,并在标准模型下证明了其安全性,同时通过实现用户和服务器的显式双向认证达到了可抗不可测在线字典攻击。新协议是第1个基于格的三方PAKE协议,与通用构造相比,通信轮数少,并且能避免大数分解和离散对数易受量子攻击的弱点。As it is resistant to quantum attacks, lattice theory is widely applied to various cryptosystem. Currently, lattice-based Password Authenticated Key Exchange （PAKE） protocols are all designed for two-party circumstance so it can not meet the application requirements for large-scale communications system. In this paper, a three party PAKE protocol is proposed based on lattice from the two party PAKE framework of Gorce-Katz, and its security is proved in the standard model. At the same time, through the realization of explicit mutual authentication between user and server, the protocol can be used to resist undetectable online dictionary attacks. The new protocol is considered to be the first three party PAKE protocol based on lattices. Compared with general construction, the new protocol reduces the number of communication round, and can avoid the weakness that cryptosystem based on the integer factorization problem or discrete logarithm problem is vulnerable to quantum attacks.

关 键 词：密钥交换 口令认证 格 标准模型 可证安全 

分 类 号：TN918.1[电子电信—通信与信息系统]