Method for authentication for resisting secrete data disclosure and key exchange based on passwords

Abstract

The invention belongs to a cryptographic protocol, and in particular relates to a method for authentication for resisting secrete data disclosure and key exchange based on passwords. The method is superior to correlative American or international current standard in the aspects of user password protection, secrete data disclosure resistance, better user privacy protection, better online efficiency calculation, less communication bandwidth and higher security. The method for the authentication and the key exchange comprises sub-methods of an innovative method for public key encryption and signcryption based on passwords, a method for knowledge binding certification, a method for resisting temporary secrete data disclosure, a method for awarding a public key certificate. The method has the advantages of good systematicness, adaptability and compatibility.

Description

technical field [0001] The invention belongs to a cryptographic protocol, and specifically relates to a password-based authentication and key exchange method against secret data leakage, a password-based public key encryption and secret signature method, knowledge binding proof and a method against temporary secret data leakage. Background technique [0002] System parameters: (G′, G, g, q), where G′ is a finite group of order N, G is a subgroup of order q in G′, and g is a generator of G, so that the definition on G The discrete logarithm problem is hard. Commonly used G′, the setting of G is as follows: G′ is Z p * = { 1,2 , · · · p - 1 } , p is a prime number, and q is divisible by (p-1), at this moment, the order of G' is N=p-1; or, G' is an elliptic curve defin...

AI Technical Summary

Problems solved by technology

[0016] (1). Digital signatures are used for identity authentication, so the privacy of users cannot be well protected;

[0017] (2). Moreover, because the verification and generation of digital signatures cannot be fully performed offline calculations in advance, the efficiency of online calculations is not good enough;

[0018] (3). Not compatible with key exchange protocols that do not use signatures

That is: the leakage of stored temporary secret data will jeopardize the security of other protocols that are running

[0024] 4. The commonly used Diffie-Hellman key exchange protocol checks that the user's DH-key component is an element in the corresponding group cannot be well combined with prior offline calculations, or cannot fully guarantee the user's DH-key component not included in small subgroups

[0025] 5. The commonly used Diffie-Hellman key exchange protocol is only for a specific application environment, and the expansion performance and system performance are poor;

Images