基于CPK和改进ECDH算法的可证安全的认证协议

针对ECDH易受中间人攻击的问题,提出在Canctti Krawczy(CK)模型下的可证安全的改进算法,并结合CPK算法,利用CK模型的模块化方法设计出安全和高效的快速认证协议,设计并改进了一个消息传输认证器,使其所采用的对称加密算法的密钥是动态生成的。协议在实现双向认证的同时,协商并确认会话密钥。分析表明,协议具有较高的安全性和性能。

Provable Secure Authentication Protocol Based on CPK and Improved ECDH Algorithm

Since ECDH was easily suffered from man-in-the-middle attack, a provable secure improved ECDH in the Canetti Krawczy(CK) model was presented. Combined with CPK, a security and efficient fast authentication protocol was devised based on the modular approach of Canetti Krawczyk(CK) model. It also designed and improved a message transmission authenticator in which the key of symmetric encryption algorithm was dynamically generated. It realized session key association and confirmation meanwhile mutual authentication. Analysis shows it has better security and performance.