IKEv2协议的分析与改进

IKEv2协议中的预共享密钥认证方式容易受到中间人攻击和离线字典攻击，从而泄漏发起方的身份信息和通信双方的预共享密钥。针对上述2种攻击，提出将数字签名认证方式与预共享密钥认证方式相结合的防御措施，引入公钥口令的思想，避免建立公钥基础设施带来的额外负担。分析结果表明，改进后的协议能够避免中间人攻击和离线字典攻击，防止通信双方身份的泄漏和预共享密钥的破解。

Analysis and Improvement on IKEv2 Protocol

The pre-shared key authentication in IKEv2 protocol is susceptible to man-in-the-middle attack and off-line dictionary attack,which makes the identity of the initiator and the pre-shared key leak out.Focusing on the two attacks,this paper proposes a measure combining digital signature authentication and pre-shared key authentication,and introduces time public key to reduce the burden of building public key infrastructure.Analysis result indicates that the improved protocol can avoid man in the middle attack...