一种RLWE密钥交换协议的公钥复用分析与改进  

Analysis and Improvement of Public Key Reuse for A RLWE Key Exchange Protocol

作　　者：段晓巍 韩益亮[1,2] 王超[1,2] 李喆[1,2] DUAN Xiaowei;HAN Yiliang;WANG Chao;LI Zhe(College of Cryptographic Engineering,Engineering University of PAP,Xi’an 710086,China;Key Laboratory of PAP for Cryptology and Information Security,Xi’an 710086,China)

机构地区：[1]武警工程大学密码工程学院,西安710086 [2]武警部队密码与信息安全保密重点实验室,西安710086

出　　处：《信息网络安全》2020年第11期87-94,共8页Netinfo Security

基　　金：国家自然科学基金[61572521];武警工程大学科研创新团队科学基金[KYTD201805]。

摘　　要：针对安全传输层协议下的0-RTT模式中公钥长期使用且不变的特点,攻击者重复利用公钥对基于错误协调的密钥交换协议进行询问,获得其有效信息并计算破解私钥。文章结合BCNS15协议中模数为偶数这一特点以及不同的错误协调函数,提出一种可以破解私钥信息的攻击方案。方案通过分析协议中信号泄露的信息推断私钥,完成攻击。文章针对协议给定的不同条件,给出了相对应的攻击方案,并减少其查询次数,经实例测试,通过此种攻击方案可以成功恢复出密钥交换协议中的私钥。Aiming at the long-term and unchanged characteristics of the public key in the 0-RTT mode under the secure transport layer protocol,the attacker can repeatedly use the public key to query a key exchange protocol based on error coordination,obtain the effective information and calculate the crack private key.Combining the feature that the modulus is even in the BCNS15 protocol and different error coordination functions,this article proposes an attack scheme that can crack the private key information.The solution infers the private key by analyzing the information leaked in the protocol and completes the attack.According to the different conditions given in the protocol,the article gives corresponding attack schemes,and reduces the number of queries.After an example test,this attack scheme can successfully recover private keys of the key exchange protocol.

关 键 词：密钥交换 错误学习 信息泄露 主动攻击 密钥重用 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]