Suppr超能文献

一种具有匿名性和可重用密钥的新型基于格的密码认证密钥交换方案。

A new lattice-based password authenticated key exchange scheme with anonymity and reusable key.

作者信息

Seyhan Kübra, Akleylek Sedat

机构信息

Department of Computer Engineering and Cyber Security and Information Technologies Research and Development Center, Ondokuz Mayis University Samsun, Samsun, Turkey.

University of Tartu, Tartu, Estonia.

出版信息

PeerJ Comput Sci. 2024 Jan 31;10:e1791. doi: 10.7717/peerj-cs.1791. eCollection 2024.

Abstract

In this article, we propose a novel bilateral generalization inhomogenous short integer solution (BiGISIS)-based password-authenticated key exchange (PAKE) scheme for post-quantum era security. The hardness assumption of the constructed PAKE is based on newly proposed hard lattice problem, BiGISIS. The main aim of this article is to provide a solution for the post-quantum secure PAKE scheme, which is one of the open problems in the literature. The proposed PAKE is the first BiGISIS-based PAKE that satisfies anonymity and reusable key features. The bilateral-pasteurization (BiP) approach is used to obtain the reusable key, and anonymity is achieved thanks to the additional identity components and hash functions. The reusable key structure reduces the time in the key generation, and anonymity prevents illegal user login attempts. The security analysis is done by following the real-or-random (RoR) model assumptions. As a result of security examinations, perfect forward secrecy (PFS) and integrity are satisfied, and the resistance against eavesdropping, manipulation-based attack (MBA), hash function simulation, impersonation, signal leakage attack (SLA), man-in-the-middle (MitM), known-key security (KKS), and offline password dictionary attack (PDA) is captured. According to the comparison analysis, the proposed PAKE is the first SLA-resistant lattice-based PAKE with reusable key and anonymity properties.

摘要

在本文中,我们提出了一种新颖的基于双边广义非齐次短整数解(BiGISIS)的密码认证密钥交换(PAKE)方案,用于后量子时代的安全保障。所构建的PAKE的硬度假设基于新提出的困难格问题——BiGISIS。本文的主要目的是为后量子安全PAKE方案提供一种解决方案,这是文献中的开放性问题之一。所提出的PAKE是首个满足匿名性和可重用密钥特性的基于BiGISIS的PAKE。双边巴氏消毒(BiP)方法用于获取可重用密钥,并且由于额外的身份组件和哈希函数实现了匿名性。可重用密钥结构减少了密钥生成时间,而匿名性则防止了非法用户登录尝试。安全分析是按照真实或随机(RoR)模型假设进行的。安全检查的结果表明,该方案满足完美前向保密性(PFS)和完整性,并且能够抵御窃听、基于操纵的攻击(MBA)、哈希函数模拟、身份假冒、信号泄漏攻击(SLA)、中间人攻击(MitM)、已知密钥安全性(KKS)以及离线密码字典攻击(PDA)。根据比较分析,所提出的PAKE是首个具有可重用密钥和匿名性属性且能抵御SLA的基于格的PAKE。

https://cdn.ncbi.nlm.nih.gov/pmc/blobs/9435/10909239/80396cf4d216/peerj-cs-10-1791-g001.jpg

相似文献

2
Password authenticated key exchange-based on Kyber for mobile devices.
PeerJ Comput Sci. 2024 Mar 29;10:e1960. doi: 10.7717/peerj-cs.1960. eCollection 2024.

引用本文的文献

1
Password authenticated key exchange-based on Kyber for mobile devices.
PeerJ Comput Sci. 2024 Mar 29;10:e1960. doi: 10.7717/peerj-cs.1960. eCollection 2024.

文献AI研究员

20分钟写一篇综述,助力文献阅读效率提升50倍。

立即体验

用中文搜PubMed

大模型驱动的PubMed中文搜索引擎

马上搜索

文档翻译

学术文献翻译模型,支持多种主流文档格式。

立即体验