基于格的抗量子认证密钥协商协议研究综述  

Research on Lattice-based Quantum-resistant Authenticated Key Agreement Protocols:A Survey

作　　者：倪亮[1] 王念平 谷威力 张茜[1] 刘伎昭 单芳芳[1] NI Liang;WANG Nian-ping;GU Wei-li;ZHANG Qian;LIU Ji-zhao;SHAN Fang-fang(School of Computer Science,Zhongyuan University of Technology,Zhengzhou 450007,China;The PLA Strategic Support Force Information Engineering University,Zhengzhou 450001,China)

机构地区：[1]中原工学院计算机学院,郑州450007 [2]中国人民解放军战略支援部队信息工程大学,郑州450001

出　　处：《计算机科学》2020年第9期293-303,共11页Computer Science

基　　金：河南省科技攻关计划项目(182102210130,192102210286);国家留学基金(201908410281);河南省高等学校重点科研项目(18A520052);国家自然科学基金(61672031)。

摘　　要：最近在量子计算研究领域所取得的进展对当前网络安全协议中大多数的安全性依赖传统数论难题的方案构成了严重的潜在安全威胁,作为基础性网络安全协议的认证密钥协商协议首当其冲。由此,抗量子认证密钥协商协议成为了近来的一个研究热点。其中,基于格的后量子密码(Post-Quantum Cryptography)方案由于安全性强、计算效率高,于近年得到了广泛重视且现在正快速发展,有望被列入未来的抗量子密码算法标准。文中重点关注基于格的后量子认证密钥协商协议研究。首先,对抗量子认证密钥协商协议的研究背景进行介绍,并对当前基于格的后量子密码方案安全性设计所基于的主要计算性困难问题进行描述;接着,对现有典型基于格的后量子认证密钥协商协议进行概述,并以两方协议为主要研究对象,对相关方案的基本构造模式和若干当前典型相关协议的性能进行讨论、分析和比较;最后,对当前研究中存在的问题进行总结,并对相关研究的未来发展进行展望。Recent advances in quantum computing have posed a serious potential security threat to the majority of current network security protocols,whose security relies on classical number-theoretic hard problems.As the basic network security protocols,authenticated key agreement protocols bear the brunt.Therefore,quantum-resistant authenticated key agreement protocols have become a recent hot research topic.Thereinto,lattice-based post-quantum cryptographic schemes,with strong security and high computational efficiency,have gained extensive attention in recent years,and are developing rapidly,which are expected to be included in the future standards of quantum-resistant cryptographic algorithms.In this paper,research on lattice-based post-quantum authenticated key agreement protocols is focused on.Firstly,the research background of quantum-resistant authenticated key agreement protocols is introduced,and the main computational hard problems that the security designs of current lattice-based post-quantum cryptographic schemes depend on are also described.Then,an overview of the existing typical lattice-based post-quantum authenticated key agreement protocols is given,and by taking the two-party protocols as the main research object,the basic construction modes of related schemes and performance of several current typical related protocols are discussed,analyzed and compared.Lastly,the existing problems in the current research are summarized,and the future development of related research is also forecasted.

关 键 词：抗量子安全协议 后量子密码 基于格的密码 认证密钥协商 可证明安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]