一种适用于基于身份的认证密钥协商的逆向防火墙协议

A reverse firewall protocol for identity-based authenticated key agreement

基于身份的认证密钥协商允许两方或者多方在不安全信道上建立安全的会话密钥。目前的认证密钥协商协议无法抵抗导致随机数泄露的后门攻击,比如已知特定于会话的临时攻击。基于此,我们设计了一种适用于基于身份的两方认证密钥协商的逆向防火墙协议。该协议在随机预言机模型下是安全的,能够抵抗强的临时会话秘密值泄露攻击,提供了消息抗泄露性。同时该协议不使用双线性对,节省了系统运行时间。最后,利用JPBC库实现了该协议。实验结果表明了该协议与同类型的协议相比,具有较小的带宽和较短的运行时间,十分适合应用于资源受限的系统中。

Identity-based authenticated key agreement allows two or more parties to establish secure session keys over insecure channels.Current authenticated key agreement protocols are unable to resist the backdoor attacks that lead to random number disclosure,such as known session-specific temporary attack.Therefore,we propose a reverse firewall protocol for identity-based authenticated key agreement.The protocol is secure under the random oracle model.In addition,it can resist strong temporary session secret value leakage attack and can provide message leakage resistance.Meanwhile,the protocol saves the system’s running time because it does not use bilinear pairing.Finally,we implement the protocol using JPBC library.The experimental results show that the protocol has smaller bandwidth and shorter running time compared with other protocols of the same type.It is very suitable for resource-constrained systems.