摘要
Diffie-Hellman协议没有身份认证机制,使其在实际应用中容易受到中间人的攻击。该文对基于预共享密钥的挑战-应答身份认证机制进行了分析和改进,最后将两者结合,提出了一种新的方案,增加了Diffie-Hellman协议的安全性和实用性。
Because of having no entity authentication mechanism, Diffie-Hellman protocol is easily attacked by the man-in-the-middle in practice. The Challenge-Response entity authentication for pre-shared key is analysed and improved. Finally a improved schema based on two aforementioned ones is given, which improves the security and practicality of Diffie-Hellman protocol.
出处
《计算机安全》
2007年第12期22-24,共3页
Network & Computer Security
