基于RLWE的生物特征认证密钥交换协议

Biometric authenticated key exchange protocol based on RLWE

在后量子密码学中,针对密钥交换协议存在口令容易丢失以及难以实现相互认证的安全缺陷,提出了一个新的基于环上误差学习的生物特征认证密钥交换协议。该协议根据环上误差学习问题构造的密码体制具有密钥及密文尺寸短、运行效率高等优势,并采用生物特征和口令作为长期密钥,同时通过Peikert式错误协调机制从各自的环元素中协调出随机均匀的会话密钥,实现了服务器对客户的显式认证。性能分析结果表明,该方案可抵抗用户假冒攻击,安全属性更高,提高了通信效率。

In post-quantum cryptography,there are security flaws in the key exchange protocol that are easy to lose passwords and difficult to achieve mutual authentication.This paper proposed a new biometric authentication key exchange protocol based on ring learning with error.The constructed cryptosystem according to the RLWE problem had the advantages of short key and ciphertext size,and high operational efficiency.It used biometrics and passwords as long-term keys.The Peikert error coordination mechanism extracted random and uniform session keys from their respective ring elements,which realized explicit authentication of servers to customers.The performance analysis results show that the scheme can resist user fake attacks,have higher security attributes and improve communication efficiency.