Abstract: Symmetric encryption mechanism is effective for mass data encryption. Symmetric key information exchange is necessary before symmetric encryption operation. A key distribution scheme is proposed, which is a combination of non-cryptographic authentication mechanism and HMAC. In this scheme, an initiative input is made from a password-based authentication mechanism. A more powerful temporary key is generated from the initiative input and the initiative key which is distributed off-line. The temporary key can be used to protect the symmetric key exchange process.

摘要： 对称密钥加密体制是加密大量数据的行之有效的方法。使用对称密钥加密体制需要通信双方协商密钥。提出了一种结合非密码认证体制和HMAC的简单快速的密钥分配方案,在完备的基于口令的身份认证体制基础上,利用散列函数的性质,根据以离线方式共享的强度较低的密钥生成安全性更高的密钥,保护通信系统的对称加密密钥协商过程。

关键词: 密钥分配, 非密码认证体制, HMAC

CLC Number: 

• TP393.08