基于Switch Ware主动网络密钥分配协议的改进

Improvement of Key Distribution Protocol for SwitchWare-based Active Network

针对SwitchWare主动网络的密钥分配协议进行了分析和研究 ,指出SwitchWare使用的密钥分配协议主要是站到站的协议 ,它是针对 2个节点的 ,这样使主体要与每个节点建立共享密钥 ,从而增大了包和CPU的开销 .因此 ,借鉴了用于多点的密钥分配协议 (GDH .2协议 ) ,并在对GDH .2安全性进行改进的基础上 ,提出了E GDH .2协议 ;最后对E GDH .

This paper analyzes and studies the key establishment protocols for SwitchWare Active Network in detail and points out that the SwitchWare using key establishment protocol is station to station protocol,which is applied for two nodes in the network,thus principal must establish shared key with each node,the packet and control processing unit overhead will be increased.So the authors of this paper make reference to multi-point key establishment protocol,group diffie? hellman.2 (GDH.2),and improve the security for the GDH.2 protocol and bring forward the extend group diffie?hellman.2 (E?GDH.2) protocol.Finally,there is an analysis of E?GDH.2 security.