对一种混合结构洋葱路由方案的密码学分析Cryptanalysisofahybrid.PDFVIP

第34 卷第4 期 通 信 学 报 Vol.34 No. 4 2013 年4 月 Journa l on Communications Apr il 2013 doi:10.3969/j .issn.1000-436x.2013.04.010 对一种混合结构洋葱路由方案的密码学分析 李龙海，付少锋，苏锐丹，车向泉 （西安电子科技大学 计算机学院，陕西 西安 7 1007 1） 摘 要：对时金桥等提出的混合结构洋葱路由方案进行了分析，发现存在的安全漏洞。第一个漏洞来源于其密码 学报文结构的可展性。攻击者能够利用该漏洞改变洋葱消息的路由或在其中嵌入标签以追踪消息路由。另一个漏 洞表现在匿名转发服务器容易遭受选择密文攻击。展示了3 种不同的能够以较低代价破坏发送者和接收者不可关 联性的攻击过程。为了避免所提到的攻击，提出了能够利用反向调查捕获恶意节点的修正方案。 关键词：匿名通信；洋葱路由；通用重加密；混合结构 中图分类号：TP393.08 文献标识码：A 文章编号：1000-436X(2013)04-0088-11 Cryptanalysis of a hybrid-structured onion routing scheme LI Long-hai, FU Shao-feng, SU Rui-dan, CHE Xiang-quan (Schoo l o f Computer Sc ience and Techno logy, X id ian University, X i’an 7 1007 1, China) Abstract: SHI Jin-q iao et al’s hybrid-structured onion routing scheme was analysed and some security flaws were found in their design. The first flaw was deriv ed from the malleab ility of its cryptographic message format which could b e ex- p loit ed by attackers to redirect an onion message or emb ed tags into it for trac ing its routing p ath. The second flaw w as the vu ln erab ility of relay servers to chosen ciphertext attack. Three d ifferent attacks were presented that each broke the sender-receiver unlinkab ility entirely at a relatively low co To evade these attacks, a modified scheme was also pro- p osed which could capture malic ious nodes by using upstream inv estigation. Key words: anonymous communication; onion routing; univ ersal re-encryption; hybrid structure 匿名通信技术的研究可以追溯到 1981 年 1 引言