可防范词典攻击的密钥分发协议

在密钥分发协议中,一般都通过在参与协议的实体之间共享秘密来提供认证服务。因为用户倾向于选择容易记忆的口令,而这种弱口令容易遭受词典攻击,因此由用户选择的口令不应是共享秘密。在许多协议中,人们使用不同的方法来解决这个问题。提出了一个基于单向函数实现的密钥分发协议。安全分析表明,该协议可以防范词典攻击。

Key Exchange Protocols Resistant to Password Guessing Attacks

It is assumed that secrets are shared among principals participating in a n authenticated key exchange protocol.Generally,u ser -chosen passwords are not approp riate for shared secrets as users are intended to choose easily memorized passwords which are vulnerable t o password guessing attacks.A lot of protocols are developed to ove rcome this problem.This paper prese nts a key exchange protocol based on one -way function.