Secure Tripartite STS Key Agreement Protocol in Random Oracle Model

安全的三方式STS金鑰協訂

李金鳳(Chin-Feng Lee) ； 簡宏宇(Hung-Yu Chien) ； 賴溪松(Chi-Sung Lai)

《資訊管理學報》 18卷2期 (2011/04) Pp. 215-235

https://doi.org/10.6382/JIM.201104.0215

摘要

著名的STS通訊協訂可提供雙方認證、金鑰確認、及向前安全等功能。在2003年Al-Riyami及Paterson學者將STS協訂擴充成三方式認證金鑰，並稱之為TAKC-STS協訂；迄今，學界認為TAKC-STS協訂可提供足夠安全並可達成最好的回合數。此篇論文將指出此機制無法抵擋中間人攻擊及內部攻擊；我們也將提出一安全的三方式認證金鑰並證明其安全。

關鍵字

安全 ； 金鑰協商協議 ； 內部攻擊 ； STS ； 向前安全 ； 中間人攻擊

並列摘要

The Station-to-Station (STS) protocol is a well known two-party key agreement scheme that provides mutual entity authentication, key confirmation and forward secrecy. Al-Riyami and Paterson (2003) extended the STS protocol to the tripartite case, which is called TAKC-STS and is believed to be secure and pass-optimal for tripartite key confirmation protocols. However, in this paper, we will show that the TAKC-STS protocol cannot resist the man-in-the-middle attack and the insider attack. We then propose a secure tripartite STS protocol to conquer the weaknesses, and prove the security in the random oracle model.

並列關鍵字

security ； key agreement ； insider attack ； STS ； forward secrecy ； man-in-the-middle attack

參考文獻

Al-Riyami, S. S.,Paterson, K. G.(2003).Tripartite Authenticated Key Agreement Protocols from Pairings.IMA Conference on Cryptography and Coding, LNCS 2898.(IMA Conference on Cryptography and Coding, LNCS 2898).

Al-Riyami, S. S.,Paterson, K. G.(2002).Authenticated three party key agreement protocols from pairings.Cryptology ePrint Archive.(Cryptology ePrint Archive).,未出版.

Bellare, M.,Rogaway, P.(1995).Provably secure session key distribution: The three party case.27th ACM Symposium on the Theory of Computing.(27th ACM Symposium on the Theory of Computing).

Bellare, M.,Pointcheval, D.,Rogaway, P.(2000).Authenticated key exchange secure against dictionary attacks.Eurocrypt.(Eurocrypt).

Burrows, M.,Abadi, M.,Needham, R.(1990).A logic of authentication.ACM TRANSACTIONS ON COMPUTER SYSTEMS.8(1),18-36.