...
  • 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>IEEE systems journal >An Identity-Based Authenticated Key Exchange Protocol Resilient to Continuous Key Leakage
【24h】

An Identity-Based Authenticated Key Exchange Protocol Resilient to Continuous Key Leakage

机译：基于身份的认证密钥交换协议，可抵抗连续密钥泄漏

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Identity-based authenticated key exchange (ID-AKE) protocol is an important cryptographic primitive, which is used to establish a session key between two communication participants while authenticating each other. Indeed, most of the existing ID-AKE protocols do not concern with side-channel attacks in the sense that adversaries could obtain partial information of ephemeral/permanent secret keys of users. Recently, several leakage-resilient ID-AKE (LR-ID-AKE) protocols have been proposed to address such attacks. However, these LR-ID-AKE protocols have a restriction that the total leakage information during the life time of the LR-ID-AKE protocol must be bounded to some ratio of ephemeral/permanent secret keys. In this paper, the authors define a new adversary model, termed as identity-based continuous-leakage extended Canetti-Krawczyk (ID-CL-eCK) model. Using the key refreshing procedure (i.e., the multiplicative blinding technique) of permanent secret keys, the first LR-ID-AKE protocol resilient to continuous key leakage is proposed, and it possesses overall unbounded leakage property. Comparisons are given to demonstrate that the proposed protocol is better than the previously proposed ID-AKE protocols in terms of security models and leakage properties. Under the generic bilinear group model, security analysis is made to show that the proposed LR-ID-AKE protocol is secure against adversaries in the new ID-CL-eCK model.
机译：基于身份的身份验证密钥交换（ID-AKE）协议是重要的加密原语，用于在彼此进行身份验证的同时在两个通信参与者之间建立会话密钥。确实，大多数现有的ID-AKE协议在攻击者可以获取用户的临时/永久密钥的部分信息的意义上，都与侧信道攻击无关。近来，已经提出了几种防漏ID-AKE（LR-ID-AKE）协议来解决这种攻击。但是，这些LR-ID-AKE协议有一个限制，即在LR-ID-AKE协议的生存期内，总泄漏信息必须限制在临时/永久密钥的某些比率上。在本文中，作者定义了一种新的对手模型，称为基于身份的连续泄漏扩展Canetti-Krawczyk（ID-CL-eCK）模型。利用永久密钥的密钥刷新过程（即乘法盲技术），提出了对连续密钥泄漏具有弹性的第一LR-ID-AKE协议，该协议具有整体的无限制泄漏特性。进行比较以证明所提出的协议在安全性模型和泄漏属性方面优于先前提出的ID-AKE协议。在通用双线性组模型下，通过安全性分析表明，在新的ID-CL-eCK模型中，所提出的LR-ID-AKE协议对对手是安全的。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号