无证书两方认证密钥协商协议攻击及改进  

Attack and improvement of a certificateless two-party authenticated key agreement protocol

作　　者：张全领 陆阳[1] 

机构地区：[1]河海大学计算机与信息学院,南京211100

出　　处：《信息技术》2015年第7期1-4,8,共5页Information Technology

基　　金：国家自然科学基金项目(61272542)

摘　　要：分析了Kim等人提出的不依赖于双线性对运算的无证书两方认证密钥协商协议,指出该协议在公钥替换攻击下不满足基本伪装攻击安全性,并给出了一个具体攻击。针对该协议存在的安全性缺陷,提出了一个改进的无证书两方认证密钥协商协议。分析表明,所提出的改进协议能够有效地抵抗公钥替换攻击并满足一些必要的安全属性。This paper analyzed a bilinear pairing-free certificateless two-party authenticated key agreement protocol proposed by Kim et al. The protocol did not satisfy an important security feature that was the basic impersonation attack under public key replacement attack. As well as, it mounted a specific attack on the protocol. Then an improved certificateless two-party authenticated key agreement protocol was presented improved protocol can security properties. in order to satisfy efficiently withstand the missing public key security property. replacement attack The analysis shows that the and satisfy some necessary security properties.

关 键 词：无证书密码体制 认证密钥协商协议 公钥替换攻击 基本伪装攻击 双线性对 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]