具有后向安全的认证密钥协商协议  

Having Backward Secure Authenticated Key Agreement Protocol

作　　者：元振杨 陈建华[1] 吴黎兵[2] 

机构地区：[1]武汉大学数学与统计学院,武汉430072 [2]武汉大学计算机学院,武汉430072

出　　处：《小型微型计算机系统》2016年第7期1398-1401,共4页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(61272112)资助

摘　　要：在密码协议中,密钥泄露是一个不容忽视的问题.然而当前很多的基于身份的无证书认证密钥协商方案都没有很好的解决这个问题.由于密钥隔离密码系统(Key-Insulated Cryptosystem)是基于密钥隔离思想,也就是说由用户根据协助器在相应的时间段内提供的信息来计算用户的临时私钥,从而协议可以同时满足前向和后向安全性.我们在杜瑞颖等提出的无证书密钥隔离签名方案的基础上,运用密钥进化理论,设计了一种新型的基于身份的无证书密钥隔离认证密钥协商协议.通过对新协议的安全性分析表明,新协议能够满足认证密钥协商协议所必须的安全属性,而且还能够满足后向安全性,避免了密钥泄露带来的危险,并且协议能够抵御侧信道攻击.Key leakage is not a concern to take lightly in cryptographic protocol. In viewof the present ID-based certificateless authenticated key agreement protocol and most of them can＇t resist the threat of key leakage. Because the key insulated cryptosystem is based on the key idea of insulation,and that is to say that user assistance is provided in the corresponding time period according to the information to calculate the user＇s temporary private key,thus the newprotocol can also achieve the forward and backward security.Basing on a certificateless key insulated signature scheme proposed by Du Rui-Ying＇s etal by incorporating the idea of key evolution;we design an ID-based certificateless key-insulated authenticated key agreement protocol. The security of the newscheme were analyzed and the result shows that the newprotocol enjoys the known security properties of the authenticated key agreement protocol and the backward security,which eliminates the key leakage problem and the protocol can resist side channel attack.

关 键 词：密钥隔离 认证 密钥协商 无证书 基于身份 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]