一种多方可认证密钥协商方案的分析与改进

在无证书公钥密码体制下对一种多方可认证密钥协商方案进行了分析,指出该方案无法抵抗合法用户的扮演攻击和口令偶尔泄露导致的危机。分析了该方案存在漏洞的原因,并在此基础上给出一个改进的密钥协商方案。新方案引入密钥种子和口令进化机制解决了上述问题,同时消除了冗余消息,降低了用户占用的带宽。分析表明新方案的安全性更强。

Analysis and improvement of the multi-party authenticated key agreement protocol

The paper analyses a multi-party authenticated key agreement based on certificateless public key cryptography system, the protocol is a danger for the legal users, which may be vulnerable to impersonation attack and reveal the password occasionally. This paper scientifically explains the reasons why the protocol is unsafe and that puts forward an improved scheme. Thereby the key seed and password evolution scheme is introduced, which can eliminate the redundant message and reduce the occupied bandwidth for the users. The analysis of security shows that the new scheme is more secure.