基于公钥签名的IKE分析与改进

Analysis of the Internet Key Exchange protocol and its amendment based on Public Key Signatures

研究了Internet密钥交换协议中基于公钥签名的身份认证技术 ,针对DSS公钥签名幂运算量过大的缺点 ,将MQV认证密钥协商协议引入到IKE(InternetKeyExchange)身份认证技术中 .新的认证方法减少了幂运算的次数 。

The Identification Authentication techniques used in IKE was analyzed based on public key signatures. Since DSS public key signature needs too many computations of exponentiation, an authenticated key agreement protocol named MQV was introduced into IKE Identification Authentication techniques. With the number of exponentiation computations reduced, the efficiency of IKE key negotiation was improved by this method.