一种高效的无证书认证密钥交换协议  

An Efficient Certificateless Authenticated Key Exchange Protocol

作　　者：曾润智 王立斌[1] ZENG Run-Zhi;WANG Li-Bin(School of Computer Science,South China Normal University,Guangzhou 510631,China)

机构地区：[1]华南师范大学计算机学院,广州510631

出　　处：《密码学报》2020年第4期421-429,共9页Journal of Cryptologic Research

基　　金：国家自然科学基金(61672243)。

摘　　要：无证书认证密钥交换解决在无证书环境下进行带认证的密钥协商问题,现有方案的设计引入较复杂的协议结构和冗余的计算以保证可证明安全性,这制约了协议运行的效率及优化.针对于此,本文提出一种高效的无证书认证密钥交换协议,该协议在确保安全性的前提下,避免在会话密钥计算中引入冗余的临时-长期信息纠缠.这使得协议双方可预计算出会话密钥的部分信息,从而优化协议运行效率.该协议不依赖双线性配对,在随机预言机模型下可证明安全.相关对比显示,在允许预计算的情况下,该协议有较低的运行开销与通信开销.Certificateless Authenticated Key Exchange provides a means for key agreement in an authentic manner on certificateless setting,which can provide security protection in network communications.To assure the provable security,current certificateless authenticated key exchange protocols have complicated structure and redundant computation,which restrict the efficiency and optimization.Aiming at solving this problem,an efficient certificateless authenticated key exchange protocol is proposed in this paper.The proposed protocol avoids redundant combinations of ephemeral information and long-term information in the construction of the session key while ensuring sufficient security.This allows both parties to pre-compute part of the session key,thus optimizing the efficiency of the protocol operation.The proposed protocol is pairing-free and has provable security in the random oracle model.A comparison shows that the proposed protocol has low computation and communication overhead when allowing pre-computation.

关 键 词：无证书公钥密码学 认证密钥交换 可证明安全性 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]