- 期刊
Efficient Implementation of Password-based Authenticated Key Exchange from RLWE and Post-Quantum TLS
摘要
Two post-quantum password-based authenticated key exchange (PAKE) protocols were proposed at CT- RSA 2017. Following this work, we give much more efficient and portable C++ implementation of these two protocols. We also choose more compact parameters providing 200-bit security. Compared with original implementation, we achieve 21.5x and 18.5x speedup for RLWE-PAK and RLWE-PPK respectively. Compare with quantum-vulnerable J-PAKE protocol, we achieve nearly 8x speedup. We also integrate RLWE-PPK into TLS to construct a post-quantum TLS ciphersuite. This allows simpler key management, mutual authentication and resistant to phishing attack. Benchmark shows that our ciphersuite is indeed practical.
延伸閱讀
- Kim, M., & Koç, Ç. K. (2008). A Secure Hash-Based Strong-Password Authentication Protocol Using One-Time Public-Key Cryptography. Journal of Information Science and Engineering, 24(4), 1213-1227. https://doi.org/10.6688/JISE.2008.24.4.14
- Wu, H. C., Liu, C. Y., & Chiou, S. F. (2005). Cryptanalysis of a Secure One-Time Password Authentication Scheme with Low-Communication for Mobile Communications. International Journal of Network Security, 1(2), 74-76. https://doi.org/10.6633/IJNS.200509.1(2).02
- Wu, S. H., & Zhu, Y. F. (2008). Proof of Forward Security for Password-Based Authenticated Key Exchange. International Journal of Network Security, 7(3), 335-341. https://doi.org/10.6633/IJNS.200811.7(3).04
- Lu, R. X., & Cao, Z. F. (2006). Off-line Password Guessing Attack on an Efficient Key Agreement Protocol for Secure Authentication. International Journal of Network Security, 3(1), 35-38. https://doi.org/10.6633/IJNS.200607.3(1).05
- Wu, M., Chen, J., & Wang, R. (2017). An Enhanced Anonymous Password-based Authenticated Key Agreement Scheme with Formal Proof. International Journal of Network Security, 19(5), 785-793. https://doi.org/10.6633/IJNS.201709.19(5).16