钥协商协议的全分析及改进.pdf

ISSN 1000-9825, CODEN RUXUEW E-mail: jos@ Journal of Software, Vol.17, No.4, April 2006, pp.868−875 DOI: 10. 1360/jos170868 Tel/Fax : +86-10 © 2006 by Journal of Software. All rights reserved. ∗ 一种认证密钥协商协议的安全分析及改进 1,2+ 1,2 1,2 周永彬 , 张振峰 , 冯登国 1( 中国科学院 软件研究所,北京 100080) 2(信息安全国家重点实验室( 中国科学院 软件研究所),北京 100080) Analysis and Improvement of a Security-Provable Mutually Authenticated Key Agreement Protocol ZHOU Yong-Bin1,2+, ZHANG Zhen-Feng1,2, FENG Deng-Guo1,2 1(Institute of Software, The Chinese Academy of Sciences, Beijing 100080, China) 2(State Key Laboratory of Information Security (Institute of Software, The Chinese Academy of Sciences), Beijing 100080, China) + Corresponding author: Phn: +86-10 Fax: +86-10 E-mail: zyb@, Zhou YB, Zhang ZF, Feng DG. Analysis and improvement of a security-provable mutually authenticated key agreement protocol. Journal of Software, 2006,17(4):868−875. /1000-9825/17/868.htm Abstract: Deng, et al . proposed a security-provable mutually authenticated key agreement protocol MAKAP for mobile communication in 2003. This paper demonstrates by mounting an effective attack against MAKAP that the protocol has security flaws. It is vulnerable against unknown key-share attack. This paper investigates the reasons why such flaws exist and proposes an improved protocol version (called MAKAP-I protocol). The MAKAP-I protocol is not only provably secure within the random oracle model but also more efficient and practical in terms of computation and communication cost memory requirement and implementation cost, than the original MAKAP protocol. Key words: authenticated