格上基于口令的三方认证密钥交换协议  

Password-based three-party authenticated key exchange protocol from lattices

作　　者：于金霞[1] 廉欢欢 汤永利[1] 史梦瑶 赵宗渠[1] YU Jinxia;LIAN Huanhuan;TANG Yongli;SHI Mengyao;ZHAO Zongqu(College of Computer Science and Technology,Henan Polytechnic University,Jiaozuo 454000,China)

机构地区：[1]河南理工大学计算机科学与技术学院,河南焦作454000

出　　处：《通信学报》2018年第11期87-97,共11页Journal on Communications

基　　金：国家密码管理局"十三五"国家密码发展基金资助项目(No.MMJJ20170122);河南省科技厅基金资助项目(No.142300410147);河南省教育厅基金资助项目(No.16A520013);河南理工大学博士基金资助项目(No.B2014-044;No.B2016-39);河南理工大学自然科学基金资助项目(No.T2018-1)~~

摘　　要：三方口令认证密钥交换协议允许用户通过一个服务器在不安全的信道中建立一个受保护的会话密钥,而现有的格上PAKE协议绝大多数都是针对两方设计的,无法适用于大规模的通信系统。基于此,提出一种新的格上三方PAKE协议,该协议主要以可拆分公钥加密体制及其相应的近似平滑投射散列函数为基础进行构造,并通过在协议中引入消息认证机制的方式来防止消息重放攻击。与同类协议相比,所提协议减少了通信轮数,提高了效率和协议应用的安全性。Password-based three-party authenticated key exchange protocol allow clients to establish a protected session key through a server over insecure channels. Most of the existing PAKE protocols on lattices were designed for the two parties, which could not be applied to large-scale communication systems, so a novel three-party PAKE protocol from lattices was proposed. The PAKE protocol was constructed by using a splittable public-key encryption scheme and an associated approximate smooth projective Hash function, and message authentication mechanism was introduced in the protocol to resist replay attacks. Compared with the similar protocols, the new protocol reduces the number of communication round and improves the efficiency and the security of protocol applications.

关 键 词：三方密钥交换 口令认证 LWE问题 可证安全性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]