Authentication key negotiation method enabling identity privacy and non-malleable security

Abstract

The invention relates to an authentication key negotiation method enabling identity privacy and non-malleable security. The method includes the following steps that: a first device transmits a determined expression, namely, X'=AX<d>, to a second device, wherein A= g is the public key of the first device, X=g<x> and d=h<d>(X, aux<d>); the second device determines an expression, namely, Y'=BY<e>, wherein B=g is the public key of the second device, Y=g<y>, and e=h<e> (Y, aux<e>), and determines S according to a DH- index y, a private key b and X', determines K and K based on S, and determines an expression, namely, C=AE(K,(I, B, CERT(B), Y, Data)) according to K and an authentication encryption function AE, transmits Y' and C to the first device; and the first device determines S according to a DH- index x, a private key a and Y', and determines K and K based on S, and the first device determines an expression, namely, C=AE (K, (I, A, CERT, X, Data)) according to K, and transmits C to the second device. According to the session key negotiation method, based on reasonable parameter setting, each device operations 2.5 modular exponentiation, and therefore, the data computation load of each device can be greatly decreased, and the generation efficiency of session keys can be improved, and the method can be applied more flexibly.

Description

technical field [0001] The invention relates to the technical field of encryption, in particular to an authentication key negotiation method with identity hiding and non-extensible security. Background technique [0002] Authenticated cryptographic negotiation is the core content of cryptographic theory and applications. Most of the authenticated key agreement protocols need to transmit the identities and public key information of the two parties in plain text. In the era of mobile Internet, user identity and public key certificate information are often sensitive information in many applications. Therefore, the development of identity-hiding authentication key agreement methods has attracted a lot of attention in network and information security theory and application engineering in recent years. [0003] The current mainstream identity-hiding key agreement protocol is the international standard of the IKE protocol of the IETF. The operation process of the IKE protocol is ...

AI Technical Summary

Problems solved by technology

This also makes it difficult for the IKE algorithm to be configured and applied on computing-limited devices (such as mobile phones, smart cards, etc.)

Images