基于格的口令认证密钥交换协议综述  

Research on password-authenticated key exchange protocol over lattices

作　　者：郭渊博[1] 尹安琪 GUO Yuanbo;YIN Anqi(Department of Cryptogram Engineering,Information Engineering University,Zhengzhou 450001,China)

机构地区：[1]信息工程大学密码工程学院,河南郑州450001

出　　处：《通信学报》2022年第12期172-187,共16页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61501515,No.61601515)。

摘　　要：量子计算技术的快速发展使基于传统困难问题的口令认证密钥交换(PAKE)协议在后量子时代面临严重的安全威胁。基于格的密码体制因高效性、高安全性,以及支持全同态加密和多线性映射等更强的密码服务功能,被美国NIST认证为后量子时代最具潜力的密码体制。首先系统地梳理格上PAKE协议的研究进展,主要包括格上集中式的两方、三方PAKE协议和分布式PAKE协议,然后分别对相关典型方案进行了对比分析,最后展望了格上PAKE协议的未来发展趋势。With the rapid development of quantum computing technology, password-authenticated key exchange(PAKE)protocol based on conventional difficult problems will face serious security threats in the post-quantum era. Lattice-based cryptosystem has been certified by NIST as the most promising cryptosystem in the post-quantum era due to its high efficiency, high security and support for stronger cryptographic service functions(such as fully homomorphic encryption and multi-linear mapping). Firstly, the research progress of lattice-based PAKE protocol was systematically sort out, mainly including the centralized two-party, three-party PAKE protocol and the distributed PAKE protocol over lattices. Then, the relevant typical schemes were compared and analyzed, respectively. Finally, the future research directions PAKE protocol over lattices were prospected.

关 键 词：口令认证密钥交换 格 可证明安全 抗量子 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]