基于非密码认证体制的密钥分配方案

对称密钥加密体制是加密大量数据的行之有效的方法，使用对称密钥匙加密体制需要通信双方协商密钥。提出了一种结合非密码认证体制和HMAC的简单快速的密钥分配方案，在完备的基于口令的身份认证体制基础上，利用散列函数的性质，根据以离线方式共享的强度较低的密钥生成安全性更高的密钥，保护通信系统的对称加密密钥协商过程。

A Key Distribution Scheme Based on Non-cryptographic Authentication Mechanism

Symmetric encryption mechanism is effective for mass data encryption. Symmetric key information exchange is necessary before symmetric encryption operation. A key distribution scheme is proposed, which is a combination of non-cryptographic authentication mechanism and HMAC. In this scheme, an initiative input is made from a password-based authentication mechanism. A more powerful temporary key is generated from the initiative input and the initiative key which is distributed off-line. The temporary key can be used to protect the symmetric key exchange process.