一种基于国产密码算法的身份认证方案

One authentication scheme based on the domestic cryptographic algorithm

提出了一种基于国产密码算法的身份认证方案。方案中的关键数据用SM2加密保护,引入随机数保证发送中间认证信息的时间具有无规律性。方案克服了传统方案存在的常见安全漏洞,可以更有效地抵御窃取信息攻击和劫取连接攻击,并保留了传统方案的安全特性,可以适用于安全性需求较高的场合。

Proposed a password authentication scheme for domestic Algorithm.Program SM2 key data encryption,to ensure that the introduction of a random number of times authentication information is sent in the middle with no regularity. Solutions to overcome the common security vulnerabilities exist in the traditional program, can be more effectively resist attacks to steal information and rob connection attacks, and security features to retain the traditional scheme can be applied to high security demands of the occasion.