基于口令的群密钥分发协议的分析与改进

本文分析了文献中提出的一个基于口令的群Diffie-Hellman密钥交换协议的安全性,发现其存在安全漏洞,无法抵抗用户发起的离线字典攻击。针对原协议存在的安全漏洞,我们对该协议进行了改进,改进后的协议保留了原方案的所有安全特性,并且可以有效的抵抗离线字典攻击,比原协议具有更高的安全性。

Analysis and Amend a Password-Based Group Diffie-Hellman Key Exchange Protocols

In this paper, through analysis the security of a password- based group Diffie- Hellman key exchange protocol mentioned in article proposed, the protocol exists some of secure leak and can not against the off- line dictionary attacks initiate by a malicious user is pointed out. So we propose an improved protocol to overcome the weakness, and the improved protocol not only preserves all the security properties in the original protocol but also can effectively against off- line dictionary attack. So the improved protocol possesses higher security than the original protocol.