基于格的用户匿名三方口令认证密钥协商协议

doi:10.11959/j.issn.1000-436x.2018021

Abstract

Abstract:

With the rapid development of quantum theory and the existence of polynomial algorithm in quantum computation based on discrete logarithm problem and large integer decomposition problem,the security of the algorithm was seriously threatened.Therefore,two authentication key agreement protocols were proposed rely on ring-learning-with-error (RLWE) assumption including lattice-based implicit authentication key agreement scheme and lattice-based explicit authentication key agreement scheme and proved its security.The implicit authentication key agreement protocol is less to communicate and faster to authentication,the explicit authentication key agreement protocol is more to secure.At the same time,bidirectional authentication of users and servers can resist unpredictable online dictionary attacks.The new protocol has higher efficiency and shorter key length than other password authentication key agreement protocols.It can resist quantum attacks.Therefore,the protocol is efficient,secure,and suitable for large-scale network communication.

Key words: lattice-based cryptology, provably secure, password authentication, key exchange, ring-learning-with-error

CLC Number:

TP309.7

Caifen WANG,Li CHEN. Three-party password authenticated key agreement protocol with user anonymity based on lattice[J]. Journal on Communications, 2018, 39(2): 21-30.

Figures/Tables 4

符号	说明
B、C	客户B和C
TID_B、TID_C	客户B和C的临时身份
S	远程服务器
pw_B、pw_C	客户B和C的口令
h、H₁、H₂、H₃、H₄	散列函数
β、ω	β∈ {0,1},ω∈{0,1}ⁿ
a、s	a ,s∈R_q
R_q	多项式环
χ_β	环上的高斯分布
Cha、Mod₂	函数
⊕	异或运算符
$A$	概率多项式时间敌手
$C H$	挑战者
sk_BC	由客户B和C生成的会话密钥

协议	文献[6]方案	文献[11]方案	文献[12]方案	文献[13]方案	文献[16]方案	本文方案1	本文方案2
类型	2-party	3-party	2-party	2-party	3-party	3-party	3-party
用户匿名性	否	否	否	否	否	是	是
相互认证	否	是	是	是	是	是	是
抵抗量子攻击	能	能	能	能	能	能	能
不可测字典攻击	否	是	是	是	是	是	是
困难假设	LWE	ASPH	RLWE	RLWE	ASPH	RLWE	RLWE
采样数	m=Ω(nlgq)	m=Ω(nlgq)	m=Ω(nlgq)	m=Ω(lgq)	m=Ω(nlgq)	m=Ω(lgq)	m=Ω(lgq)
公钥长度/bit	m(2n+1)lgq	3mn lg q	m(2n+1)lgq	2 mn lg q	m(2n+1)lgq	2 mn lg q	2 mn lg q
密文扩展率	$\frac{m}{n}$	$\frac{3 m n}{n - 1}$	$\frac{2 m n}{n - 1}$	$\frac{m}{n}$	$\frac{3 m n}{n - 1}$	$\frac{m}{n}$	$\frac{m}{n}$
运算方法	矩阵运算	环运算	环运算	环运算	环运算	环运算	环运算
计算复杂度	O (mn)	O(mlgn)	$O (2^{2 n - 2})$	O(mlgn)	$O (2^{2 n + 2})$	O(mlgn)	O(mlgn)
消息传输量/轮	3	3	2	2/3	4	2	3

References 17

[1]	LAW L , MENEZES A , QU M ,et al. An efficient protocol for authenticated key agreement[J]. Designs,Codes and Cryptography, 2003,28(2): 119-134.
[2]	ABADLLA M , FOUQUE P A , POINTCHEVAL D . Password-based authenticated key exchange in the three-party setting[C]// International Workshop on Public Key Cryptography. 2005: 65-84.
[3]	RAIMANDO M D , GENNARO R . Provably secure threshold password-authenticated key exchange[J]. Journal of Computer and System Sciences, 2006,72(6): 978-1001.
[4]	ZHAO F , GONG P , LI S ,et al. Cryptanalysis and improvement of a three-party key agreement protocol using enhanced Chebyshev polynomials[J]. Nonlinear Dynamics, 2013,74(1-2): 419-427.
[5]	XIE Q , ZHAO J , YU X . Chaotic maps-based three-party password-authenticated key agreement scheme[J]. Nonlinear Dynamics, 2013,74(4): 1021-1027.
[6]	KATZ J , VAIKUNTANATHAN V . Smooth projective hashing and password-based authenticated key exchange from lattices[C]// International Conference on the Theory and Application of Cryptology and Information Security. 2009: 636-652.
[7]	DING Y , FAN L . Efficient password-based authenticated key exchange from lattices[C]// 2011 Seventh International Conference on Computational Intelligence and Security (CIS). 2011: 934-938.
[8]	DING J , XIE X , LIN X . A simple provably secure key exchange scheme based on the learning with errors problem[J]. IACR Cryptology Eprint Archive, 2014:688.
[9]	FUJIOKA A , SUZUKI K , XAGAWA K ,et al. Practical and post-quantum authenticated key exchange from one-way secure key encapsulation mechanism[C]// The 8th ACM SIGSAC Symposium on Information,Computer and Communications Security. 2013: 83-94.
[10]	胡学先, 魏江宏, 叶茂 . 对一个强安全的认证密钥交换协议的分析[J]. 电子与信息学报, 2013,35(9): 2278-2282.
	HU X X , WEI J H , YE M . Cryptanalysis of a strongly secure authenticated key exchange protocol[J]. Journal of Electronics ＆Information Technology, 2013,35(9): 2278-2282.
[11]	叶茂, 胡学先, 刘文芬 . 基于格的三方口令认证密钥交换协议[J]. 电子与信息学报, 2013,35(6): 1376-1381.
	YE M , HU X X , LIU W F . Password authenticated key exchange protocol in the three party setting based on lattices[J]. Journal of Electronics ＆ Information Technology, 2013,35(6): 1376-1381.
[12]	ZHANG J , ZHANG Z , DING J ,et al. Authenticated key exchange from ideal lattices[C]// Annual International Conference on the Theory and Applications of Cryptographic Techniques. 2015: 719-751.
[13]	DING J , ALASYIGH S , LANCRENON J ,et al. Provably secure password authenticsated key exchange based on RLWE for the post-quantum world[C]// Cryptographers’ Track at the RSA Conference. 2017: 183-204.
[14]	杨孝鹏, 马文平, 张成丽 . 一种新型基于环上带误差学习问题的认证密钥交换方案[J]. 电子与信息学报, 2015,37(8): 1984-1988.
	YANG X P , MA W P , ZHANG C L . New authenticated key exchange scheme based on ring learning with errors problem[J]. Journal of Electronics ＆ Information Technology, 2015,37(8): 1984-1988.
[15]	STEBILA D , MOSCA M . Post-quantum key exchange for the Internet and the open quantum safe project[R]. Cryptology Eprint Archive,Report 2016/1017, 2016.
[16]	杨晓燕, 侯孟波, 魏晓超 . 基于验证元的三方口令认证密钥交换协议[J]. 计算机研究与发展, 2016,53(10): 2230-2238.
	YANG X Y , HOU M B , WEI X C . Verifier-based three-party password authenticated key exchange protocol[J]. Journal of Computer Research and Development, 2016,53(10): 2230-2238.
[17]	XU D , HE D , CHOO K R ,et al. Provably secure three-party password authenticated key exchange protocol based on ring learning with error[J]. IACR Cryptology Eprint Archive, 2017:360.

Metrics

Recommended 0

No Suggested Reading articles found!

Three-party password authenticated key agreement protocol with user anonymity based on lattice

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 4

References 17

Related Articles 15

Metrics

Recommended 0

[1]	Shengbao WANG, Xin ZHOU, Kang WEN, Bosen WENG. Tripartite authenticated key exchange protocol for smart grid [J]. Journal on Communications, 2023, 44(2): 210-218.
[2]	Huanhuan LIAN, Huiying HOU, Yunlei ZHAO. Post-quantum verifier-based three-party password authenticated key exchange protocol [J]. Journal on Communications, 2022, 43(4): 95-106.
[3]	Anqi YIN, Yuanbo GUO, Ding WANG, Tongzhou QU, Lin CHEN. Provably secure quantum resistance two-server password-authenticated key exchange protocol [J]. Journal on Communications, 2022, 43(3): 14-29.
[4]	Yuanbo GUO, Anqi YIN. Research on password-authenticated key exchange protocol over lattices [J]. Journal on Communications, 2022, 43(12): 172-187.
[5]	Yanshuo ZHANG,Zehao WANG,Zhiqiang WANG,Huiyan CHEN. Verifiable three-party secure key exchange protocol based on eigenvalue [J]. Journal on Communications, 2019, 40(12): 149-154.
[6]	Jinxia YU,Huanhuan LIAN,Yongli TANG,Mengyao SHI,Zongqu ZHAO. Password-based three-party authenticated key exchange protocol from lattices [J]. Journal on Communications, 2018, 39(11): 87-97.
[7]	Zhi-yan XU,Li-bing WU,Li LI,De-biao HE. Provably secure certificateless aggregate signature scheme in wireless roaming authentication [J]. Journal on Communications, 2017, 38(7): 123-130.
[8]	Wen-fen LIU,Jiang-hong WEI,Xue-xian HU. Predicate-based authenticated key exchange protocol with attribute-hiding [J]. Journal on Communications, 2012, 33(Z1): 41-47.
[9]	De-xin YANG,Bo YANG,Xi-ming LI. Efficient two-server password authenticated key exchange scheme [J]. Journal on Communications, 2010, 31(9A): 228-232.
[10]	Xiu-mei LIU,Ke-ning GAO,Gui-ran CHANG. Hierarchical group password-authenticated key exchange based on bilinear pairing [J]. Journal on Communications, 2010, 31(6): 44-48.
[11]	Jian SHU,Chun-xiang XU. Analysis and improvement of a password-based authenticated key exchange protocol [J]. Journal on Communications, 2010, 31(3): 51-56.
[12]	Wen-ju LIU,Jun-wei ZHANG,Jian-feng MA,Chao YANG,Xing-hua LI. Security model for ID-based key exchange [J]. Journal on Communications, 2010, 31(3): 89-94.
[13]	Shi-chong TAN,Liao-jun PANG,Wan-li SU,Yu-min WANG. Efficient anonymous password-based authenticated key exchange scheme [J]. Journal on Communications, 2009, 30(4): 17-20.
[14]	HOUTao Z,UJing X. Enhanced authentication and key exchange protocols for roaming service [J]. Journal on Communications, 2009, 30(11A): 61-69.
[15]	Feng-jiao WANG,Yu-qing ZHANG. New security model for cross-realm C2C-PAKE protocol [J]. Journal on Communications, 2008, 29(4): 24-29.