基于NTRU新型认证密钥协商协议的设计  

New design of authenticated key agreement protocol based on NTRU

作　　者：李子臣[1,2] 张亚泽[1,3] 张峰娟[1,3] 

机构地区：[1]西安电子科技大学通信工程学院,西安710071 [2]北京印刷学院,北京102600 [3]北京电子科技学院,北京100070

出　　处：《计算机应用研究》2018年第2期532-535,541,共5页Application Research of Computers

基　　金：国家自然科学基金资助项目(61370188);北京市支持中央高校共建项目--青年英才计划项目;中央高校基本科研业务费专项资金资助课题

摘　　要：NTRU是目前最实用的基于格构造的密码体制,然而相对于基于NTRU的加密、签名方案,其密钥协商协议却一直很少见诸文献。针对这一问题,提出了一种基于NTRU格的认证密钥协商协议。在随机预言机模型下,该方案在e CK模型中可证明安全,并且可以抵抗中间人、重放、冒充攻击,达到弱完美前向安全;与传统的DH、ECDH等方案相比,该方案计算效率更高,同时因其安全性可以归约到基于格中最短向量困难问题,可以抗量子攻击。NTRU is the most practical cryptosystem based on the lattice structure currently. However, comparing with the en- cryption and signature schemes based on the NTRU, there was very few papers in concern of the key agreement protocol. To address these problems, this paper proposed a new authenticated key agreement protocol, which was based on the NTRU lattice. Under the random oracle model, the proposed scheme is provably secure in the eCK model, also can resist man-in-themiddle attack, replay attack, impersonation attack and achieves weak perfect forward secrecy. Compared with the traditional DH and ECDH scheme, the scheme not only has higher computational efficiency, but also resists quantum attacks because of the shortest vector problem on lattice.

关 键 词：格 认证密钥协商 可证明安全 eCK模型 NTRU 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]