IKEv2预共享密钥认证机制的改进算法

预共享密钥认证方式作为IKEv2中认证方式之一,具有实施简单等优势,但是该认证方式下预共享密钥容易被泄露,从而导致整个认证过程的失败。为了解决以上缺陷,文中尝试将预共享密钥、密钥恢复、秘密共享中的拉格朗日多项式门限方案等思想和方法结合起来并且提出了一种改进算法,将认证双方预先共享的密钥进行拆分,任何一方不能单独恢复预先共享的密钥,从而降低了预先共享的主密钥泄露的可能性,也防止了任何一方泄露预共享密钥造成认证失败的后果,提高了预共享密钥认证方式的安全性。

Improved Algorithm for Pre-shared Key Authentication Mechanism in IKEv2

As an authentication mechanism of IKEv2,pre-shared key authentication mechanism has advantages that easy to carry out.But,this kind of authentication mechanism is easy to disclose the pre-shared key,and leads to failure of authentication.To solve the above defects,the article tries to integrate the pre-shared key,key recover,secret share thoughts and methods,and brings up an improved algorithm to take apart the pre-shared key,descends the possibility of the leak the key,and prevents from disclosing the key result in the failure of authentication,enhances the safety of the pre-shared key authentication mechanism.