基于格的用户匿名三方口令认证密钥协商协议  

Three-party password authenticated key agreement protocol with user anonymity based on lattice

作　　者：王彩芬 陈丽 

机构地区：[1]西北师范大学计算机科学与工程学院,甘肃兰州730070

出　　处：《通信学报》2018年第2期21-30,共10页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61662069;No.61562077;No.61662071);西北师范大学青年教师科研能力提升计划基金资助项目(No.NWNU-LKQN-14-7)~~

摘　　要：随着量子理论的快速发展,离散对数问题和大整数分解问题在量子计算下存在多项式求解算法,其安全性受到严重威胁,因此,提出2个基于环上带误差学习问题的用户匿名三方口令认证密钥协商方案,包括基于格的隐式认证密钥协商方案和基于格的显式认证密钥协商方案,并证明了其安全性。其中,隐式认证密钥协商协议通信量少、认证速度快,显式认证密钥协商协议安全性更高,同时实现用户和服务器的双向认证、可抗不可测在线字典攻击。与其他口令认证密钥协商协议相比,所提协议有更高的效率和更短的密钥长度,能够抵抗量子攻击,因此,该协议既高效又安全,适用于大规模网络下的通信。With the rapid development of quantum theory and the existence of polynomial algorithm in quantum computation based on discrete logarithm problem and large integer decomposition problem, the security of the algorithm was seriously threatened. Therefore, two authentication key agreement protocols were proposed rely on ring-learning-with-error （RLWE） assumption including lattice-based implicit authentication key agreement scheme and lattice-based explicit authentication key agreement scheme and proved its security. The implicit authentication key agreement protocol is less to communicate and faster to authentication, the explicit authentication key agreement protocol is more to secure. At the same time, bidirectional authentication of users and servers can resist unpredictable online dictionary attacks. The new protocol has higher efficiency and shorter key length than other password authentication key agreement protocols. It can resist quantum attacks. Therefore, the protocol is efficient, secure, and suitable for large-scale network communication.

关 键 词：格密码 可证明安全 口令认证 密钥交换 环上带误差 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]