Three-party authentication key agreement protocol generating method based on certificates

Abstract

The invention relates to a three-party authentication key agreement protocol generating method based on certificates. The method is applied to a wireless network system and comprises the steps: (1) three communication parties A, B and C respectively send respective certificate to other two parties; (2) after the communication party A receives the certificates sent by the communication parties B and C, x is randomly selected as a temporary private key, the formulas that MA=(g*g<c>)*g<x> , NA1=(g)<x> and NA2=(g<c>)<x> are calculated, then the communication party A sends MA and NA1 to the communication party B, and sends MA and NA2 to the communication party C, and the processing modes of the communication parties B and C are identical with that of the communication party A; (3) after the communication party A receives the messages sent by the communication party B and the communication party C, calculation and verification are performed, if the formula is false, a protocol is stopped from operating; if the formula is successful, a session key is calculated; the modes of calculating the session keys of the communication party B and the communication party C are identical with that of the communication party A; (4) an agreement is completed. According to the three-party authentication key agreement protocol generating method based on the certificates, modular and exponent arithmetic and a hash function are used, the operation efficiency is higher, and the agreement can resist the man-in-the-middle attack, the unknown secret key sharing attack and the secret key reveal impersonation attack, so that the safety is high.

Description

technical field

[0001] The invention relates to the field of cryptography, in particular to a new method for generating a certificate-based three-party authentication key agreement agreement, which is suitable for three-party secure communication in a wireless network. Background technique

[0002] Key Agreement Protocols (KAP for short) is an important means of protecting network security. It can enable two or more parties to confirm the identity of each other during the communication process, and after confirming the true identity of the other party, negotiate Generate a secret session key known only to two or more communicating parties.

[0003] In 1976, Diffie and Hellman pioneered the concept of public key cryptography and the first key agreement protocol - Diffie-Hellman protocol, and then many scholars started research on it. In 2000, Joux proposed the first three-party key agreement protocol using bilinearity on elliptic curves. Since then, many three-party key agr...

Images