CCMP协议的量化可验安全分析

Concrete provable security analysis of CCMP protocol

为了分析无线局域网IEEE802.11i标准中替换存在严重安全问题的WEP协议的CCMP协议的安全性能,利用Bellare的量化可验安全模型对CCMP建立形式化分析模型,从数据机密性保护和完整性保护两个方面,建立与攻击者攻击成功的概率有关的优势函数对CCMP协议进行量化可验分析.分析表明,CCMP协议的认证性和机密性对应的攻击成功概率分别为O(n)×2-64和O(n2)×2-128.该协议设计达到了预期的安全设计目标,满足无线局域网安全需求.

The security of the CCMP （counter mode with cipher block chaining message authentica- tion code protocol）, which is involved in IEEE 802. 11 i working group to substitute the WEP （wired equivalent privacy） protocol with seriously security problem, is discussed. A concrete provable security analysis method is adopted to analyze the data confidentiality and integrity of the CCMP protocol. The results show that the CCMP can provide a capability of security with O（n）×2^-64 and O （n^2） × 2^-128 probability of successful attacking to confidentiality and integrity respectively. The CC- MP protocol has achieved the anticipated design goals, and can satisfy the security requirements of the WLAN（ wireless local area network）.