一种强安全的无证书非交互密钥交换协议

发布时间：2018-04-01 14:11

本文选题：无证书公钥密码体制　切入点：非交互密钥交换协议　出处：《计算机科学》2014年12期

【摘要】：非交互密钥交换协议(Non-interactive Key Exchange,NIKE)允许通信双方在没有信息交互的情况下生成一个共享密钥。在基于身份的非交互密钥交换协议(Identity-based Non-interactive Key Exchange,ID-NIKE)中,用户私钥是由私钥生成中心(Private Key Generator,PKG)分发给用户的,因此PKG可以计算出用户之间的共享密钥,即存在密钥托管的问题。针对ID-NIKE的上述不足,基于无证书的公钥密码体制(Certificateless Public Key Cryptography,CL-PKC),首先提出了无证书非交互密钥交换协议的安全模型,然后设计了一个强安全的无证书非交互密钥交换协议方案,并在随机预言模型下基于BDH假设给出了协议的安全性证明。该方案是第一个基于CL-PKC的非交互密钥交换协议方案,并结合了CL-PKC和NIKE的优点,因此该方案不仅具有非交互的性质,而且PKG计算不出用户间的共享密钥,所以其可以更好地保护用户隐私。另外,该协议还允许用户部分秘密信息泄露,因此具有更高的安全性。
[Abstract]:Non-interactive Key Exchange Protocol allows both parties to generate a shared key without information exchange. In Identity-based Non-interactive Key Exchange ID-NIKE, the ID-based non-interactive key exchange protocol, The user's private key is distributed to the user by the Private Key Generator (PKG), so PKG can calculate the shared key between users, that is, there is a problem of key escrow. Based on certificateless Public Key cryptography, a security model of certificate free non-interactive key exchange protocol is proposed, and then a strongly secure non-interactive key exchange protocol is designed. The security proof of the protocol based on BDH hypothesis is given in the stochastic prediction model. This scheme is the first non-interactive key exchange protocol based on CL-PKC and combines the advantages of CL-PKC and NIKE. Moreover, PKG can not calculate the shared key between users, so it can better protect the privacy of users. In addition, the protocol also allows users to disclose some secret information, so it has higher security.
【作者单位】：解放军信息工程大学数学工程与先进计算国家重点实验室;
【基金】：国家自然科学基金(61379150,61309016) 河南省自然科学基金(122102210426) 信息保障技术重点实验室开放课题(KJ-13-02) “十二五”密码发展基金(MMJJ201201005)资助
【分类号】：TN918.4

【共引文献】