后量子基于验证元的三方口令认证密钥交换协议

Post-quantum verifier-based three-party password authenticated key exchange protocol

针对服务器直接以明文的方式存储口令,存在服务器泄露的风险,基于两方的基于格的口令认证密钥交换(PAKE)协议不适用于大规模通信系统的问题,提出了一种格上基于验证元的三方口令认证密钥交换协议。通过随机口令哈希方案生成验证元,并结合口令策略检查机制实现口令的检查,利用基于格的CCA安全公钥加密体制构造一个新的基于验证元的3PAKE协议,同时实现用户与服务器的双向认证。安全性和性能分析证明了所提协议在通信效率和安全度上都具有较好的优势。

In view of the fact that server stored the passwords directly in plaintext,there was a risk of server compromise,and two-party PAKE protocol was not suitable for large-scale communication systems,a three-party verifier-based password authenticated key exchange protocol from lattices was proposed.Hashing scheme and zero-knowledge password policy check were combined to realize the generation of verifier and the password checking.A novel verifier-based 3PAKE protocol was constructed by using CCA-secure public-key encryption from lattices,which realized mutual authentication.Security and performance analysis shows that the proposed protocol has better advantages in communication efficiency and security.