非交互密钥交换协议的设计与证明

发布时间：2018-03-28 05:33

本文选题：非交互密钥交换协议　切入点：无证书公钥密码体制　出处：《解放军信息工程大学》2014年硕士论文

【摘要】：非交互密钥交换协议使得通信双方在没有信息交互的情况下生成一个共享密钥。由于其非交互的特性,非交互密钥交换协议具有较低的通信复杂性,因此特别适用于资源受限的无线移动通信环境。设计安全高效的非交互密钥交换协议并证明其安全性,是近年来认证密钥交换协议研究领域的一个热点问题,具有重要的理论价值和广阔的应用前景。当前,非交互密钥交换协议的安全模型还不完善,设计方法还不成熟,很多问题有待进一步的解决。本文主要针对非交互密钥交换协议的安全模型和设计方法进行了研究,取得了以下研究成果：1.研究了无证书非交互密钥交换协议。针对基于身份的非交互密钥交换协议中存在的密钥托管问题(即用户私钥完全由私钥生成中心生成,使得中心可以冒充任意用户,并计算出任意用户之间的共享密钥),提出了无证书非交互密钥交换协议的安全模型,并利用双线性对构造了一个无证书非交互密钥交换协议,最后在随机预言模型下基于GBDH和CDH困难性假设给出了协议的安全性证明。2.研究了不使用双线性对的无证书非交互密钥交换协议。利用Schnorr签名设计了一个不利用双线性对的无证书非交互密钥交换协议,并在随机预言模型下基于GDH和CDH困难性假设给出了协议的安全性证明。最后我们将其与已有的基于身份的非交互密钥交换协议就安全性和计算代价两方面进行了对比,结果表明我们的协议具有更强的安全性和更高的计算效率。3.研究了具有前向安全的非交互密钥交换协议。在对Steinwandt和Corona提出的具有前向安全的非交互密钥交换协议进行深入分析的基础上,针对Lin等人给出的攻击,对协议进行了修改,并在随机预言模型下基于DBDH困难性假设给出了协议的前向安全的证明。改进后的协议在不降低计算效率的条件下,可以克服Lin等人的攻击并实现前向安全性。
[Abstract]:The non-interactive key exchange protocol enables both parties to generate a shared key without information interaction. Because of its non-interactive characteristics, the non-interactive key exchange protocol has a lower communication complexity. Therefore, it is especially suitable for wireless mobile communication environments with limited resources to design and prove the security of a secure and efficient non-interactive key exchange protocol, which is a hot issue in the field of authentication key exchange protocol research in recent years. At present, the security model of non-interactive key exchange protocol is not perfect, and the design method is not mature. Many problems need to be solved further. This paper mainly studies the security model and design method of non-interactive key exchange protocol. The following research results are obtained: 1. The non-interactive key exchange protocol without certificates is studied. In view of the key escrow problem existing in the identity-based non-interactive key exchange protocol (that is, the user's private key is completely generated by the private key generation center, the user's private key is completely generated by the private key generation center. So that the center can pretend to be any user and calculate the shared key between any user. The security model of non-interactive key exchange protocol without certificate is proposed, and a non-interactive key exchange protocol without certificate is constructed by using bilinear pairs. Finally, based on the assumption of GBDH and CDH difficulty, the security proof of the protocol is given in the stochastic prophecy model. 2. The non-certificate non-interactive key exchange protocol without bilinear pair is studied. A non-bivariate key exchange protocol is designed by using Schnorr signature. A non-interactive key exchange protocol without certificates for linear pairings, The security proof of the protocol is given based on the assumption of GDH and CDH difficulty in the stochastic prediction model. Finally, we compare it with the existing identity-based non-interactive key exchange protocol in terms of security and computational cost. The results show that our protocol has better security and higher computing efficiency. 3. The non-interactive key exchange protocol with forward security is studied. The non-interactive key exchange protocol with forward security is proposed for Steinwandt and Corona. On the basis of in-depth analysis, In response to the attack given by Lin et al, the protocol is modified, and the forward security proof of the protocol is given based on the assumption of DBDH difficulty in the stochastic prediction model. It can overcome the attack of Lin et al and realize forward security.
【学位授予单位】：解放军信息工程大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN918.4

【相似文献】