强安全零往返时间密钥交换协议分析与设计

Analysis and design of strong security zero round-trip time key exchange protocol

零往返时间密钥交换协议可有效降低网络通信的连接时延。通过分析现有零往返时间密钥交换协议,可知其安全模型缺乏通用性,且忽略了现实计算环境中存在的中间信息泄露等安全问题。针对抗信息泄露的强安全密钥交换协议属性和后量子安全性等新的安全需求,为强安全零往返时长密钥交换协议的分析与设计构造通用的形式化安全模型,并为具体协议设计提出一种新型通用构造方案,指出协议设计的若干关键思路。

Zero round-trip time(0-RTT)key exchange protocols can effectively reduce the connection latency of network communication.It is pointed that the existing 0-RTT key exchange protocols are lack of universality security,and fail to take the intermediate information leakage into account.According to the new security requirements of anti-leakage strong secure key exchange protocol and post quantum security,a general strong security model of 0-RTT key exchange protocols is proposed,and a generic construction of strongly-secure 0-RTT key exchange protocols is designed to present key ideas in protocol design.