一种安全高效的无证书可认证密钥协商方案

A Secure and Efficient Certificateless Authenticated Key Agreement Scheme

针对两方密钥协商方案普遍存在高效性和安全性不可兼顾问题,在无证书公钥密码体制下给出一种安全高效的可认证两方密钥协商方案。该方案使用一般的而非映射到点的Hash函数并预先处理一个双线性对运算,降低计算复杂度,提高了执行效率;增加用户间的身份认证,提高了安全性。性能分析表明,新方案满足前向安全性;抗密钥泄露伪装攻击;已知会话临时秘密信息安全性等目前期望的安全属性,且有较好的执行效率。

It is a matter of fact that high efficiency and security of the two-party key agreement can ＇ t be done at the same time, a secure and efficient certifieateless authenticated two-party key agreement scheme is proposed based on certifieateless public key cryptography system. In this system, it handles a bilinear pairing operation beforehand and uses an ordinary Hash function rather than mapping to point. The scheme can reduce the computational complexity and is of greater efficiency of execution. With the addition of a user identification, the two-party key agreement scheme is slightly safer. The performance analysis shows this scheme can fulfil the expected security of the forward secrecy, key compromise impersonation attack and known session-specific temporary information secrecy. Meanwhile it keeps the high computational efficiency.