认证群密钥协商协议的安全性分析与改进

汪小芬; 李胜强; 肖国镇

认证群密钥协商协议的安全性分析与改进

1.
西安电子科技大学ISN综合业务网国家重点实验室西安 710071;
2.
电子科技大学计算科学与工程学院成都 610054

基金项目:

国家自然科学基金(60773003,60603010)

详细信息

作者简介:
汪小芬(1982-)，女，博士生，主要从事密码学方面的研究.

中图分类号: TN918
计量
- 文章访问数: 4757
- HTML全文浏览量: 132
- PDF下载量: 75
出版历程
- 收稿日期: 2007-09-23
- 修回日期: 2008-04-22
- 刊出日期: 2009-02-14

Analysis and Improvement of an AuthenticatedGroup Key Agreement Protocol

1.
National Key Lab of Integrated Service Networks,Xidian University Xi'an 710071;
2.
School of Computer Science and Engineering,University of Electronic Science and Technology of China Chengdu 610054

摘要

摘要: 对Tseng协议构造了一种有效的中间人伪造攻击，敌手可以成功获得群会话密钥，因此Tseng协议不满足密钥认证性。然后基于Tseng协议的安全缺陷，提出改进协议，并进行安全性分析和性能分析。改进协议实现了通信节点之间的双向认证，不但满足前向安全性、密钥认证性，还能有效抵抗被动攻击和中间人伪造攻击。改进协议中的低能量节点计算出会话密钥的时间只需2.03s，高能量节点的计算时间仅为原协议的1/2，并且通信开销减小了40%，更适用于能量受限，带宽受限的移动通信系统。
- 群密钥协商 /
- 前向安全性 /
- 密钥认证 /
- 中间人伪造攻击
Abstract: An authenticated group key agreement protocol for resource-limited mobile devices was proposed by Tseng Y.M. It is demonstrated that this protocol has security vulnerabilities by mounting a man-in-middle attack against it. The protocol can not achieve key authentication in the presence of an active attacker. This paper presents an improved protocol which achieves mutual authentication. It provides not only the capability of forward secrecy and key authentication, but also the capability against passive attack and man-in-middle attack. The analysis shows that the presented protocol has lower computation cost and communication cost compared with Tseng's protocol.
- group key agreement /
- forward secrecy /
- key authentication /
- man-in-middle attack