On robust key agreement based on public key authentication On robust key agreement based on public key authentication
On robust key agreement based on public key authentication On robust key agreement based on public key authentication
复制标题
基于公钥认证的鲁棒密钥协商 基于公钥认证的鲁棒密钥协商
DOI：
10.1002/sec.550
复制
发表时间：
2014
影响因子：
--
通讯作者：
Hao F
中科院分区：
文献类型：
--
作者：
Hao F
本文讨论公钥认证密钥协商协议。首先，我们批判性地分析了几个认证密钥协商协议，发现各种理论和实践的缺陷。特别是，我们提出了两个新的攻击哈希Menezes-Qu-Vanstone（HMQV）协议，这是目前正在标准化的IEEE P1363。这些攻击表明，在解释正式模型的理论结果时应该谨慎。我们进一步指出，过去的许多协议故障都是由于回避了一个重要的工程原则，即“不要假设您收到的消息具有特定的形式（如grfor knownr），除非您可以检查这一点。过去的构造通常以效率为由抵制这一原则：检查指数的知识通常被认为太昂贵。在一个具体的例子中，我们展示了如何有效地将零知识证明原语集成到协议设计中，同时获得良好的效率。我们的新的密钥协商协议，YAK，具有可比的计算效率的MQV和HMQV协议具有明显的优势，在安全性。在所有相关技术中，我们的协议似乎是迄今为止最简单的。我们相信简单也是一个重要的工程原则。版权所有© 2012约翰威利父子有限公司.
This paper discusses public key‐authenticated key agreement protocols. First, we critically analyze several authenticated key agreement protocols and uncover various theoretical and practical flaws. In particular, we present two new attacks on the Hashed Menezes‐Qu‐Vanstone (HMQV) protocol, which is currently being standardized by IEEE P1363. These attacks suggest the caution one should take when interpreting theoretical results from a formal model. We further point out that many of the protocol failures in the past are caused by sidestepping an important engineering principle, namely, “Do not assume that a message you receive has a particular form (such asgrfor knownr) unless you can check this.” Constructions in the past generally resisted this principle on the grounds of efficiency: checking the knowledge of the exponent is commonly seen as too expensive. In a concrete example, we demonstrate how to effectively integrate the zero‐knowledge proof primitive into the protocol design and, meanwhile, achieve good efficiency. Our new key agreement protocol, YAK, has comparable computational efficiency to the MQV and HMQV protocols with clear advantages on security. Among all the related techniques, our protocol appears to be the simplest so far. We believe simplicity is also an important engineering principle. Copyright © 2012 John Wiley & Sons, Ltd.