一种基于ECDH的可认证密钥协商协议

针对Diffie-Hellman密钥交换协议和ECDH密钥协商协议的缺陷,给出了一种改进后的可认证密钥协商协议。该协议具有等献性、密钥不可控、密钥确认、完美前向安全以及抗已知密钥攻击等安全特性。跟以往的密钥协商协议相比,其管理简单、开销较低、安全性高、扩展性较好且实现了身份认证,以较低的计算成本和较高的运算效率实现了通信双方安全的会话密钥协商与密钥验证,能够较好地适用于大规模网络的端到端密钥管理。

An Authenticated Key Agreement Protocol Based on ECDH

For the defects of Diffie-Hellman key exchange and ECDH protocol,an authenticated key agreement protocol is proposed. This proposed protocol is of such security properties as key uncontrollability,key confirmation,perfect forward security,and resistance to known key attacks. Furthermore,this protocol as compared with traditional ones,is simple in management,low in overhead,and high in security,and could achieve secure key agreement and verification between the communication parties with lower computing cost and higher efficiency. Analysis indicates that this protocol is fairly applicable to the end-to-end key management of large-scale networks.