摘要： 针对多数口令密钥协商(PAKE)协议不具备双向认证功能的问题，基于通用可组合(UC)模型，提出一种UC安全的双向口令认证密钥协商(MPAKE)协议。定义具有双向认证功能的PAKE协议理想函数，描述实体之间的双向认证关系，并利用联合状态UC模型构造实现该理想函数的协议，使协议实体之间可以使用共享参数。该协议基于口令实现了双向认证，并能够协商出会话密钥。通过构造仿真器及其执行的操作分析MPAKE的不可区分性，从而证明该协议是UC安全的，并且结构简单，可保证在任意多方环境中并行运行时的安全。

关键词: 口令认证密钥协商协议, 双向认证, 通用可组合安全, 仿真器, 认证协议, 安全性证明

Abstract: To solve the problem that mutual authentication is lacked in many existing Password-authenticated Key Exchange(PAKE) protocol, this paper proposes an Universally Composable(UC) secure Mutual Password-authenticated Key Exchange(MPAKE) protocol. An ideal function of PAKE protocol with mutual authentication is defined, the mutual authentication between entities is described explicitly in the defined function, and a new protocol which achieves the ideal function is constructed based on the Joint state UC(JUC) model. So the shared parameters can be used to facilitate the protocol between entities. The new protocol can realize mutual authentication based on password and a session key can also be negotiated. The emulator and its operations are constructed, and its indistinguishability is analyzed. Thus the constructed new PAKE protocol with mutual authentication is proved to be UC secure and simple structure, and the security of protocol is realized when running in parallel in any multi-party environment.

Key words: Password-authenticated Key Exchange(PAKE) protocol, mutual authentication, Universally Composable(UC) secure, emulator, authentication protocol, security proof

中图分类号: 

• TP309