格上两方口令认证密钥交换协议研究综述  

Survey of Lattice-based Two-party Password Authentication Key Exchange Protocols

作　　者：舒琴 王圣宝 胡斌[1] 路凡义 SHU Qin;WANG Shengbao;HU Bin;LU Fanyi(School of Information Science and Technology,Hangzhou Normal University,Hangzhou 311121,China)

机构地区：[1]杭州师范大学信息科学与技术学院,浙江杭州311121

出　　处：《杭州师范大学学报（自然科学版）》2021年第5期463-470,共8页Journal of Hangzhou Normal University(Natural Science Edition)

基　　金：国家重点研发计划项目(2017YFB0802000);国家自然科学青年基金项目(61702152,61702153);浙江省教育厅科研项目(Y202044830).

摘　　要：量子计算机的发展威胁着传统基于数论的口令认证密钥交换协议的安全.由于格密码系统具有较高的渐进效率、可并行计算以及抗量子攻击等优点,基于格上难题的口令认证密钥交换协议的研究成为一大热点.本文归纳和总结近年来格上两方口令认证密钥交换协议的发展和研究现状,依据构造思路分类别对协议的设计思想及运行过程进行深入阐述,并从安全性和运行性能两方面进行分析比较.最后,我们指出格上两方口令认证密钥交换协议研究中存在的问题与挑战,并给出进一步的研究方向.The development of quantum computers threatens the security of traditional number theory based password authenticated key exchange protocols.Since lattice-based cryptosystems have the advantages of higher progressive efficiency,parallel computing and quantum attack resistance,the research of password authentication key exchange protocol based on the lattice hard problem has become a hot topic.This paper surveys the current state of the art on two-party lattice-based password authenticated key exchange protocols.According to the basic construction paradigm,the design ideas and procedures of the protocol are presented in depth,followed by security and performance analysis.Finally,we point out several problems and challenges in this research area,and propose some further research directions.

关 键 词：密钥交换 口令认证 带误差学习 环上误差学习 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]