一种基于Diffie-Hellman协议的秘密共享算法  

A Secret Sharing Algorithm Based on Diffie-Hellman Protocol

作　　者：张悦[1] 郑东[1] 张应辉[1,2] 

机构地区：[1]西安邮电大学无线网络安全技术国家工程实验室,陕西西安710121 [2]中国科学院信息工程研究所信息安全国家重点实验室,北京100093

出　　处：《计算机技术与发展》2015年第12期123-127,共5页Computer Technology and Development

基　　金：国家自然科学基金资助项目(61272037;61402366);陕西省自然科学基础研究计划重点项目(2013JZ020);西安邮电大学创新基金项目(CXL2014-04)

摘　　要：PKI是支持公开密钥管理并能支持认证、加密、完整性和可追究性服务的基础设施。为了克服传统的PKI在秘密共享时,存在需要借助可靠第三方、不能抵抗差分分析攻击、实现难度大、需要借助硬件实现等缺点,提升秘密共享的安全性与实用性,在Diffie-Hellman秘密分享的基础上,首先利用该算法共享一个初始密钥,然后每次在秘密分享的过程中,将随机数种子和初始密钥作和值,采用了和值的Hash值作为会话密钥的方法,模拟出了一种一次一密的加密算法,并用给出了该算法安全性的证明。通过在Java平台上的仿真实验,可以得知,每一次的会话密钥千差万别,很接近一次一密,而且在通信过程中并没有借助硬件和可信第三方的帮助。进一步说明了算法的安全性、实用性与有效性。PKI is the infrastructure for support of public key management and authentication, encryption, integrity and accountability. In order to overcome the disadvantages that traditional PKI in secret sharing, needs use reliable third party, can＇ t resist differential analysis, implements difficultly, needs hardware to implement etc, and to improve the security and practicability of secret sharing, on the basis of Diffie-Hellman secret sharing, at first use this algorithm to share a initial key, then in each secret sharing process, the Hash value is used as a method of session key to simulate a encryption algorithm of one-time system and give the security verification. Through the simula- tion experiments on the Java platform, can observe that every session key is different,it is close to a one-time pad algorithm, and there is no help with the hardware and the trusted third party in the process of communication. The security ,practicability and effectiveness of the algorithm are also explained.

关 键 词：信息安全 Diffie—Hellman密钥共享协议 秘密分享 一次一密 无可信第三方 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]