認(rèn)證密鑰協(xié)商協(xié)議及其安全研究.pdf

1、學(xué)校代號(hào)：學(xué)號(hào)：密級(jí)：10532S03101022公丌湖南大學(xué)碩士學(xué)位論文Y89203五認(rèn)證密鑰協(xié)商協(xié)議及其安全研究堂僮蟲(chóng)道厶蛙墨；匡垡洼昱婭姓名壁蟹整!旦冽叢盟逝墨直煎援墻羞里僮；遷簋扭皇垣信堂瞳童、業(yè)魚(yú)疊!讓簋Il筮住曼堡逢詮窒攫童旦塑12QQ生Q劃!i旦詮窒簦瓣旦期；2QQ生Q≥旦2日簦燮委員壘圭庭；壹垡塑攫認(rèn)證密銷(xiāo)協(xié)商協(xié)議及其安爭(zhēng)研究AbstractNumerousDifneHellamnbasedAKandAKCprotoco

2、lhavebeenpmposed，however，manyhavesubsequentlybeenfoundtohavesomesecuritynawsBytheSecurityattrjbutesofAKandAKCprotocolsdennedbyLaweta1，thjspaperemphasizesonanalyzingsomeprotocolsFirsny，findsomesecuritynaws，andnewauthentic

3、atedkeyagreementprotoc01sareproposedSecondly，formalmodelsoftheseprorocolsareprovided，andthentheseprotocolsproposedareproVensecurewithinthisf鋤ewod【inmerandomoraclemodeIListasf0IIows：Firstly，theSAKAprotocolisanalysed，becau

4、setheauthenticationcodesofthetwoprotoc01participantscompletely1ieonthelongtermsharedkey，soitdoesnotresistkey—compromjseimpersonationInthisp印er，anellipticcurVecryptographybasedprovablysecureauthenticatedkeyagreementisprop

5、osed，namely，SEAKprotoc01Inthisnewprotocol，theauthenticationcodeoftheitsinitiatofdependonthesharedlongtemkey，buttheamhenticationcodeoftheitsresponderreliesonsessionkey，andthesessionkeyisahashedvalueofconcatenationoftlle10

6、ng—termsharedkey，thescalarmultiplicationofthelongtermpriVatekeyandephemeralpublickey，andthescalarmultiplicationoftheprivatekeyandlong—termpublickey，whichensurethattheprotocolresistskey—compromiseimpersonationAlso，heurist

7、icanalysisofsecurityandperformanceanalysisaremadeontheSEAKprotocoI，andaIlappropriateformalmodelisprovided，theprotocolisprovensecureinECCDHandtherandomoraclemodelsecondly，theuAPprotoc01isanalysed，becausethekeyconfirmation

8、completelyliesonthelong—termprivatekey，soitdoesnotachievefbnvardsecrecy，andresistskeycompromiseimpersonationInthispaper，anECCbasedpmvablysecureAKCisproposed，namely，SAKCprotoc01Inthisnewprotocol，ThekeycoⅡfirmationisincorp

9、oratedintotheauthenticatedkeyagreem髓吐，anditskeyconfirmationisahashedValueofconcatenationofthescalarmultip“cationofthelong—temprivatekeyandephemeralpublickey，andthescalarmultiplicationofmeprivatekeyand10ng—ternlpub“ckey，w

10、hichensurethattheprotocolachievesfbr、vardsecrecy，andresistskey—compromiseimpersonationAIso，aheuristicanaIysisofsecurityandperformanceanalysisismadeontheSAKCprotoc01，andanappropriatefomalmodelisprovided，theprotocolisprove