无证书两方认证密钥协商协议攻击及改进

Attack and improvement of a certificateless two-party authenticated key agreement protocol

分析了Kim等人提出的不依赖于双线性对运算的无证书两方认证密钥协商协议,指出该协议在公钥替换攻击下不满足基本伪装攻击安全性,并给出了一个具体攻击。针对该协议存在的安全性缺陷,提出了一个改进的无证书两方认证密钥协商协议。分析表明,所提出的改进协议能够有效地抵抗公钥替换攻击并满足一些必要的安全属性。

This paper analyzed a bilinear pairing-free certificateless two-party authenticated key agreement protocol proposed by Kim et al. The protocol did not satisfy an important security feature that was the basic impersonation attack under public key replacement attack. As well as, it mounted a specific attack on the protocol. Then an improved certificateless two-party authenticated key agreement protocol was presented improved protocol can security properties. in order to satisfy efficiently withstand the missing public key security property. replacement attack The analysis shows that the and satisfy some necessary security properties.