基于安全评估的信任模型研究

口令认证密钥交换协议允许参与者通过一个低熵的共享口令在不安全的网络上进行相互认证并建立安全的会话密钥。文章在非对称“PKI模型”下基于卡梅隆函数提出了一个两方的口令认证密钥交换协议，并且在下证明了协议的安全性。用户和服务器利用卡梅隆函数计算出一个双方共享的秘密值来加强认证，通过两轮交互实现了用户和服务器之间的双向认证。与同类的协议相比，本文中的协议在增加少量计算量的条件下减少了通信轮数，因此特别适用于无线网络环境。

Research on Trust Model Based on Security Evaluation

Password-based authenticated key exchange protocols allow users to authenticate each other and securely establish a common secret key over an insecure channel only using a low entropy password.This paper proposes a two-party password-based authenticated key exchange protocol based on chameleon hash function,and proves its security in the random oracle model.The client and the server compute a common secret value by the chameleon hash function to enhance authentication,and the proposed protocol realizes mutu...