基于CPK的TLS握手协议的设计与研究.pdfVIP

第42 卷 第3 期 电 子 科 技 大 学 学 报 Vol.42 No.3 20 13年5月 Journal of University of Electronic Science and Technology of China May 20 13 基于CPK的TLS握手协议的设计与研究 程克非 ，贾廷强 (重庆邮电大学计算机科学与技术学院 重庆 南岸区 400065) 【摘要】TLS协议作为当今应用最广泛的传输层安全协议，受到了人们的极大关注，但是其自身存在证书管理复杂、握 手交互过多和安全缺陷等诸多问题。对TLS握手协议分析和研究，并结合基于身份的组合公钥密码体制(CPK)的特点，提出了 基于CPK的握手协议方案。通过对其安全性分析和基于串空间模型理论的形式化证明，证明了该方案的安全可靠性高。在相 同安全条件下进行仿真，实验结果显示与原方案对比该方案具有握手交互次数少、鉴别简捷、建立可信连接过程简单、高效 等明显优点。 关 键 词 组合公钥; 握手协议; 安全分析; 串空间模型; TLS 中图分类号 TP393.08 文献标志码 A doi:10.3969/j.issn.1001-0548.2013.03.020 Design and Research of CPK-Based TLS Handshake Protocol CHENG Ke-fei and JIA Ting-qiang (College of Computer Science and Technology, Chongqing University of Posts and Telecommunications Nanan Chongqing 400065) Abstract As one of the most widely applied transport layer security protocols, the transport layer security (TLS) protocol has caused widespread attention, but it still has a lot of problems, such as complex certificate management, too much times of interactive shake hands, safety defects, and so on. Through the analysis and research on the shake hands protocol of the TLS, and combining the features of the identity-based combined public key (CPK) cryptosystems, a new CPK-based handshake protocol is proposed. The new scheme is much better in security and reliability proved by the security analysis and the formal analysis based on the strand space theory. The simulation experiment and comparison with original protocol with equivalent security show that the CPK-based handshake protocol has some obvious advantages, such as more less number of shake hands interaction, more simple id