具有后向安全的认证密钥协商协议

Having Backward Secure Authenticated Key Agreement Protocol

在密码协议中,密钥泄露是一个不容忽视的问题.然而当前很多的基于身份的无证书认证密钥协商方案都没有很好的解决这个问题.由于密钥隔离密码系统(Key-Insulated Cryptosystem)是基于密钥隔离思想,也就是说由用户根据协助器在相应的时间段内提供的信息来计算用户的临时私钥,从而协议可以同时满足前向和后向安全性.我们在杜瑞颖等提出的无证书密钥隔离签名方案的基础上,运用密钥进化理论,设计了一种新型的基于身份的无证书密钥隔离认证密钥协商协议.通过对新协议的安全性分析表明,新协议能够满足认证密钥协商协议所必须的安全属性,而且还能够满足后向安全性,避免了密钥泄露带来的危险,并且协议能够抵御侧信道攻击.

Key leakage is not a concern to take lightly in cryptographic protocol. In viewof the present ID-based certificateless authenticated key agreement protocol and most of them can＇t resist the threat of key leakage. Because the key insulated cryptosystem is based on the key idea of insulation,and that is to say that user assistance is provided in the corresponding time period according to the information to calculate the user＇s temporary private key,thus the newprotocol can also achieve the forward and backward security.Basing on a certificateless key insulated signature scheme proposed by Du Rui-Ying＇s etal by incorporating the idea of key evolution;we design an ID-based certificateless key-insulated authenticated key agreement protocol. The security of the newscheme were analyzed and the result shows that the newprotocol enjoys the known security properties of the authenticated key agreement protocol and the backward security,which eliminates the key leakage problem and the protocol can resist side channel attack.