Abstract: L. Harn and H. -Y. Lin proposed a multiple-key agreement protocol without using hash function. In one round of executiontwo users can share more than one session keys. This paper proves that this protocol is insecure. A cheater can easily impersonate a user to share keys with others. Finally, the paper gives an improved protocol that can defeat this attack.

摘要： L. Harn 与H.-Y. Lin 提出了一种不使用散列函数的密钥交换协议，执行一遍该协议可以生成多于一个的共享密钥。该文证明了这个协议是不安全的，入侵者可以容易地冒充一个合法用户与其他用户建立共享密钥。最后给出了一个改进的协议可以有效地抵抗这种攻击。

关键词: 密钥交换, 单向散列函数, 多密钥

CLC Number: 

• TN915.04