Single interaction authenticated key agreement protocol of identity-based cryptosystem

Abstract

The invention discloses a single interaction authenticated key agreement protocol of an identity-based cryptosystem, and relates to the field of cryptography. The key agreement efficiency can be effectively enhanced and the interaction frequency can be reduced. The solving technical scheme is that a random number is self-selected through combination of an opposite side public key and an own side private key, and a session key of both communication sides is constructed through bilinear operation and Hash operation. The single interaction authenticated key agreement protocol of the identity-based cryptosystem comprises the following steps that 1) a PKG generates system parameters and generates and distributes corresponding private keys to all the hosts in a local domain; and 2) a client side initiates a key agreement request to a server side and transmits key information, and generates the session key according to the algorithm and stores the session key. Natural binding of the identity and the public key is completed based on the identity-based cryptographic technology so that use of a certificate can be avoided; a master key and a temporary key are combined so as to meet the known session key security, partial forward security, partial key resistant disguise leaking, unknown key resistant sharing, message independence and known session temporary secret information security and resist the man-in-the-middle attack; and operation is easy and convenient and the computational complexity is low.

Description

technical field [0001] The invention relates to the technical field of cryptography, in particular to a single-interaction authentication key agreement agreement based on an identity cryptosystem. Background technique [0002] Key agreement protocol (Key Agreement Protocol, KAP) plays an important and fundamental role in network security communication, which allows two entities to negotiate a secure session key on an open channel to ensure the security of communication between the two parties. [0003] In 1976, Diffie and Hellman proposed the concept of public key cryptography and proposed the first key agreement agreement: D-H agreement, but the agreement does not have the authentication function. In the traditional public key infrastructure (Public Key Infrastructure, PKI), certificates are needed to ensure the security of the system, which essentially uses an authoritative third-party trusted organization to sign for users. This management system involves many certificat...

AI Technical Summary

Problems solved by technology

This management system involves many certificate management issues: including generation, issuance, backup, revocation, etc., occupying a lot of system-related resources

In the identity-based key agreement protocol, even if the attacker obtains the master key of the private key generation center PKG, it still cannot calculate the session key of the participating entities

Images