基于理想格的通用可组合两方口令认证密钥交换协议  

Universally Composable Two-Party Password-Based Authenticated Key Exchange from Ideal Lattices

作　　者：舒琴 王圣宝[1] 路凡义 韩立东[1] 谭肖 SHU Qin;WANG Shengbao;LU Fanyi;HAN Lidong;TAN Xiao(School of Information Science and Engineering,Hangzhou Normal University,Hangzhou 311121,China)

机构地区：[1]杭州师范大学信息科学与工程学院,杭州311121

出　　处：《电子与信息学报》2021年第6期1756-1763,共8页Journal of Electronics & Information Technology

基　　金：国家重点研发计划项目(2017YFB0802000);国家自然科学基金青年项目(61702152,61702153);浙江省教育厅科研项目(Y202044830)。

摘　　要：大部分现有基于格的两方口令认证密钥交换协议(2PAKE)都是在基于不可区分的公共参考串模型或Bellare-Pointcheval-Rogaway(BBR)模型下被证明安全的。该文提出一个基于环上带误差学习问题的两方口令认证密钥交换协议,并在通用可组合框架下证明其安全性。与同类协议相比,新协议具有更高的安全性和更高的效率。Most of the existing two-party password-based Authenticated Key Exchange(2PAKE)protocols from lattices are proven secure using the indistinguishable common reference string model or the Bellare-Pointcheval-Rogaway model.This paper proposes a two-party password-based authenticated key exchange protocol based on the Ring Learning With Errors(RLWE)problem and proves its security under the Universally Composable(UC)framework.Compared with similar protocols,the new protocol achieves a higher level of security and efficiency.

关 键 词：两方密钥交换协议 口令认证 环上带误差学习问题 通用可组合模型 

分 类 号：TN918[电子电信—通信与信息系统] TP309.7[电子电信—信息与通信工程]