PBKDF2函数的一种快速实现  

A Novel Fast Implementation of PBKDF2

作　　者：于飞[1] 李晓华[2] 兰天[1] 吉庆兵[1] 张李军[1] 

机构地区：[1]保密通信重点实验室 [2]78179部队

出　　处：《信息安全与通信保密》2013年第12期100-102,共3页Information Security and Communications Privacy

基　　金：国家自然科学基金项目资助(批准号:61309034)

摘　　要：PBKDF2是公钥加密标准PKCS#5的一部分,它在各类加密软件和互联网中应用广泛。对基于口令的密钥导出函数PBKDF2的实现进行了分析,给出了该算法的一种快速实现的优化方案。对优化方案进行了理论分析,并针对802.11协议的WPA/WPA2-PSK认证进行了优化方案的实验,均表明优化方案的实现效率是优化前的两倍。通过进一步的分析还发现,依赖于PBKDF2的身份认证方案抵抗暴力攻击的能力最多只有预期的一半,因此应当增加其循环次数。PBKDF2（ Password Based Key Derivation Function 2）, as a part of Public Key Cryptography Standard #5 by RSA and a key algorithm for identityauthentication in practice, is widely used in eneryption software and internet. This paper analyzes the implementation of PBKDF2 and proposes a novel optimized implementation scheme. Both theoretical analysis and experiment on WPA/WPA2-PSK authentication of 802.11 standard indicate that the proposed scheme is of a 2-fold increase in efficiency as compared with the original scheme, and that the ability of identity authentication based on PBKDF2 against brute-force attack is at most as half as the expected. Thus the increase of its iteration number is a must.

关 键 词：身份认证 基于口令的密钥导出函数 信息安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]