基于CSIDH的认证密钥交换协议  

AUTHENTICATION KEY EXCHANGE PROTOCOL BASED ON CSIDH

作　　者：张亚峰 陈辉焱 陈昱帆 Zhang Yafeng;Chen Huiyan;Chen Yufan(Department of Cryptography and Technology,Beijing Electronic Science and Technology Institute,Beijing 100070,China)

机构地区：[1]北京电子科技学院密码科学与技术系,北京100070

出　　处：《计算机应用与软件》2024年第10期386-392,共7页Computer Applications and Software

摘　　要：针对Galbraith等提出的基于超奇异同源的认证密钥交换协议存在的安全问题,通过使用NAXOS技巧,并将通信双方静态密钥的Diffie-Hellman值添加到会话密钥的计算中,提出一个新的基于CSIDH的两轮认证密钥交换协议,并给出安全性证明。该协议是目前第一个基于CSICDH问题假设,且在eCK模型下可证明安全的认证密钥交换协议。经对比,该协议具有更强的安全属性,具体表现在可抵抗最大暴露攻击和自适应性攻击等方面。To solve the security problems in existing of the supersingular isogeny-based authentication key exchange protocol proposed by Galbraith,this paper proposes a new two-round authentication key exchange protocol based on CSIDH by using NAXOS techniques,and adding the Diffie-Hellman value of the static key of the two communicating parties to the calculation of the session key.Its proof of security was given.This protocol was currently the first authentication key exchange protocol based on the CSICDH problem assumption and provably secure under the eCK model.By comparison,the protocol has stronger safety attribute,which is specifically manifested in the ability to resist maximum exposure attacks and adaptive attacks.

关 键 词：认证密钥交换 eCK模型 DIFFIE-HELLMAN 群作用 超奇异椭圆曲线 同源 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]