一种基于PUF的PBE系统

A PUF-based PBE System

为提高PBE(Password Base Encryption,PBE)系统的安全性,提出了一种基于PUF(PhysicalUnclonable Function,PUF)的PBE 系统设计。系统中使用PUF 替代传统伪随机数发生器,通过使用PUF 的激励响应对(Challenge Response Pair,CRP)和辅助数据,系统可实现盐的生产和盐的重建,并进一步构造密钥。因为PUF 具有物理不可克隆性,且不需要传统非易失性存储器,所以PUF 可以大幅度提高PBE 系统的抗字典攻击和抗克隆攻击能力,同时有效保证密钥存储的安全性,大大降低密钥管理和维护的成本。

In order to improve the security of PBE (Password Base Encryption, PBE) system, the PBE system design based on PUF (Physical Unclonable Function) is proposed. The system, by using PUF instead of the traditional pseudo-random number generator, CRP (Challenge Response Pair, CPR) and the auxiliary data, can realize the production and reconstruction of the Salt, and further construct the encryption key. Because its having physical unclonability and requiring no traditional non-volatile memory, PUF can greatly improve the anti-dictionary and anti-cloning attacks of PBE system, while effectively guaranteeing the security of key storage and greatly reducing the cost of key management and maintenance.