首页 | 本学科首页   官方微博 | 高级检索  
     

认证协议中可信第三方签名的新鲜性漏洞
引用本文:赵梦龙,唐郑熠,龙士工. 认证协议中可信第三方签名的新鲜性漏洞[J]. 计算机与数字工程, 2011, 39(7): 105-108
作者姓名:赵梦龙  唐郑熠  龙士工
作者单位:贵州广播电视大学 贵阳550004
基金项目:美国GeneChiu基金
摘    要:文章提出有可信第三方参与的认证协议中,存在一个第三方签名的新鲜性漏洞,并以NSPK协议、A(0)协议和NS签名协议为例,说明这种漏洞存在的普遍性,同时设计出了相应的攻击方法。最后,分析了这种漏洞产生的原因,并提出了在签名消息中加入时间戳的改进方法。

关 键 词:认证协议  新鲜性  签名  协议攻击  时间戳

A Freshness Defect of Trusted Third Party's Signature in Authentication Protocol
Zhao Menglong,Tang Zhengyi,Long Shigong. A Freshness Defect of Trusted Third Party's Signature in Authentication Protocol[J]. Computer and Digital Engineering, 2011, 39(7): 105-108
Authors:Zhao Menglong  Tang Zhengyi  Long Shigong
Affiliation:Zhao Menglong Tang Zhengyi Long Shigong (Guizhou Radio & TV University,Guiyang 550004)
Abstract:This paper puts forward a freshness defect of third party's signature in authentication protocol which has trusted third party. Making NSPK protocol, A(0) protocol and NS signature protocol as examples, the universality of this defect and design the corresponding attack methods are proposed. Finally, the cause of this defect is analyzed and the improved scheme is put forward by using timestamp.
Keywords:authentication protocol  freshness  signature  protocol attack  timestamp
本文献已被 CNKI 维普 万方数据 等数据库收录!
设为首页 | 免责声明 | 关于勤云 | 加入收藏

Copyright©北京勤云科技发展有限公司  京ICP备09084417号