基于椭圆曲线的跨域端到端口令认证密钥协商协议

跨域端到端口令认证密钥协商协议(C2C-PAKA)的主要目的是使分布在不同域中持有不同口令的两个客户端可以在各自服务器的协助下实现相互认证并协商出共同的会话密钥。本文中,我们基于椭圆曲线上的离散对数问题,在直接通信架构下给出一个跨域的口令认证的密钥协商协议。该协议中,诚实的服务器是不能获取任何关于会话密钥的值。各参与方之间能够实现相互认证。与同类协议比较,该协议具有较小的通信负担和计算负担,更易于实现。此外,协议还能够抵抗字典攻击、口令泄露模仿攻击和未知会话密钥共享攻击等通用攻击类型,同时能够实现前向安全、无密钥控制和已知会话密钥安全等安全属性。

Cross-realm Client-to-client Password-authenticated Key Agreement Protocol Based on Elliptic Curve Cryptosystem

Cross-realm client-to-client password-authenticated key agreement protocol aims at establishing session key and realizing authentication between clients from different realms with the help of corresponding sewers. In this paper, based on elliptic curve cryptosystem, we proposed a cross-realm password- authenticated key agreement protocol in indirect communication model. The honest but curious servers could not obtain the session key in the protocol. Authentication can be realized among participants. Compared with similar protocols, the protocol need lower communication cost and computation cost. Besides, the protocol could resist dictionary attacks, password compromised impersonation attack and unknown-key share attack： At the same time, forward secrecy, no key control and known session key security can be realized.