CAJ | 학술논문

针对标准模型下可证明安全的基于身份认证密钥协商协议给出了一种有效攻击,指出其无会话密钥托管的协议存在安全缺陷.当密钥生成器(PKG)被恶意控制时,协商的会话密钥仍能被计算出来.为了抵抗这种攻击,给出了一种改进的基于身份认证密钥协商协议. 改进的协议在标准模型下是可证明安全的,具有无会话密钥托管的属性.
침대표준모형하가증명안전적기우신빈인증밀약협상협의급출료일충유효공격,지출기무회화밀약탁관적협의존재안전결함.당밀약생성기(PKG)피악의공제시,협상적회화밀약잉능피계산출래.위료저항저충공격,급출료일충개진적기우신빈인증밀약협상협의. 개진적협의재표준모형하시가증명안전적,구유무회화밀약탁관적속성.
The security of a provably secure identity-based authenticated key agreement protocol in the standard model was analyzed, and it was found that the protocol used in escrowless mode has security flaws. When the private key generator (PKG) is controlled or attacked, all of the session keys can be obtained. To resist this attack, the identity-based authenticated key agreement protocol was improved. This new protocol was proven to be secure in the standard model and has the property of not needing session key escrow.