可证明安全的后量子两方口令认证密钥协商协议  

Provably secure post-quantum two-party password authenticated key agreement protocol

作　　者：倪亮[1] 张亚伟 王念平 周恒昇 刘笑颜 谷兵珂 Ni Liang;Zhang Yawei;Wang Nianping;Zhou Hengsheng;Liu Xiaoyan;Gu Bingke(School of Computer Science,Zhongyuan University of Technology,Zhengzhou 450007,China;College of Cryptography Engineering,Information Engineering University,Zhengzhou 450001,China)

机构地区：[1]中原工学院计算机学院,郑州450007 [2]信息工程大学密码工程学院,郑州450001

出　　处：《计算机应用研究》2023年第4期1208-1213,1219,共7页Application Research of Computers

基　　金：河南省科技攻关计划资助项目(232102210134,182102210130);国家留学基金资助项目(201908410281);国家自然科学基金资助项目(61672031);河南省高等学校重点科研项目(21A520053)。

摘　　要：口令认证密钥协商可以在客户机和服务器之间建立安全的远程通信,且可以将一个低熵口令放大为一个高熵的会话密钥。然而,随着量子计算技术的快速发展,基于大数分解和离散对数等经典数学难题的PAKA协议面临着严峻的安全挑战。因此,为了构建一个高效安全的后量子PAKA协议,依据改进的Bellare-Pointcheval-Rogaway(BPR)模型,提出了一个基于格的匿名两方PAKA协议,并且使用给出严格的形式化安全证明。性能分析结果表明,该方案与相关的PAKA协议相比,在安全性和执行效率等方面有一定优势,更适用于资源受限的物联网(Internet of Things, IoT)智能移动设备。Password authentication key agreement can not only establish secure remote communication between client and server,but also amplify a low-entropy password into a high-entropy session key.However,with the rapid development of quantum computing technology,PAKA protocol based on classical mathematical problems such as large number decomposition and discrete logarithm is facing serious security challenges.Thus,in order to construct an efficient and secure post-quantum PAKA protocol,this paper proposed a post-quantum lattice-based anonymous two-party PAKA protocol based on the improved BPR model and gave a strict formal security proof.The performance analysis results show that compared with the related PAKA protocol,the proposed protocol has some advantages in security and execution efficiency.So it is more suitable for resource-constrained Internet of Things smart mobile devices.

关 键 词：口令认证密钥协商 基于格的密码 环上带误差学习 可证明安全 抗离线字典攻击 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]