鲁棒且高效的远程认证及密钥协商协议

由于口令容易记忆，基于口令的认证协议已被广泛采用于各种网络服务中。然而由于口令的低熵性导致了基于口令的认证协议易遭受到各种攻击。2011年，Islam等(ISLAM SK H, BISWAS G P. Improved remote login scheme based on ECC. IEEE-International Conference on Recent Trends in Information Technology. Washington, DC: IEEE Computer Society, 2011： 1221-1226)提出一种改进的基于椭圆曲线的远程登录协议，该协议存在着被盗校验子攻击和客户身份冒充攻击，同时并未能提供双向认证。为了解决此类问题提出了一种基于椭圆曲线的远程认证和密钥协商协议(RAKA)，RAKA基于椭圆曲线离散对数难题，在执行过程中只需做6次点乘运算和7次哈希运算，比Islam等协议少用1次点乘运算，协议效率提高约15%，是一种比Islam等协议更安全、高效的协议。

Robust and efficient remote authentication with key agreement protocol

Password-based authentication and key exchange protocol have been widely used in various network services due to easy memory of password.Unfortunately,password-based authentication scheme also suffers from attacks because of the low entropy of password.In the year 2011,Islam et al.(ISLAM SK H,BISWAS G P.Improved remote login scheme based on ECC.IEEE-International Conference on Recent Trends in Information Technology.Washington,DC: IEEE Computer Society,2011: 1221-1226)proposed an improved remote login scheme based on Elliptic Curve Cryptography(ECC).Whereas,the scheme was vulnerable to stolen-verifier and impersonation attacks and failed to provide mutual authentication.Therefore,the authors proposed a password-based Remote Authentication with Key Agreement(RAKA) protocol using ECC to tackle the problems in Islam et al.’s scheme.RAKA was based on Elliptic Curve Discrete Logarithm Problem(ECDLP) and needed to compute six elliptic curve scale multiplications and seven hash function operations during a protocol run.The efficiency improves by about 15%.It is more secure and efficient than Islam et al.’s scheme.