Correcting the security definition of the Bellare-Rogaway 3PKD model

LIU Jun1; LIAO Jian-xin1; ZHU Feng2; WANG Chun1

您当前的位置：

首页 >

文章列表页 >

Correcting the security definition of the Bellare-Rogaway 3PKD model

更新时间：2024-10-14

- Correcting the security definition of the Bellare-Rogaway 3PKD model
- Issue 9, Pages: 1-6(2007)
- 作者机构：
  
  1. 北京邮电大学网络与交换技术国家重点实验室
  2. 中国科学院软件研究所基础软件国家工程中心
- 作者简介：
- 基金信息：
- DOI：
  CLC： TN918
- Published：2007
- 稿件说明：
移动端阅览
LIU Jun1, LIAO Jian-xin1, ZHU Feng2, et al. Correcting the security definition of the Bellare-Rogaway 3PKD model[J]. 2007, (9): 1-6.
DOI：

LIU Jun1, LIAO Jian-xin1, ZHU Feng2, et al. Correcting the security definition of the Bellare-Rogaway 3PKD model[J]. 2007, (9): 1-6. DOI：

摘要

指出Bellare和Rogaway在1995年提出的三方密钥分发模型——Bellare-Rogaway 3PKD模型的安全性定义存在缺陷。为此

设计了一个新的三方密钥分发协议P-Flaw。该协议在Bellare-Rogaway 3PKD模型下是可证明安全的。但是通过分析发现该协议不能够抵抗服务器欺骗攻击、已知会话密钥攻击和重放攻击等攻击形式

其原因在于Bellare-Rogaway 3PKD模型不能够对分发的会话密钥进行源识别。利用匹配会话的概念

修正了Bellare-Rogaway 3PKD模型的安全性定义。

Abstract

A flaw lied in the security definition of the Bellare-Rogaway 3PKD model

which was proposed by Bellare and Rogaway for three-party key distribution in 1995

was discovered.To reveal it

a new three-party key distribution proto-col P-Flaw was proposed.The protocol was provably secure under the Bellare-Rogaway 3PKD model.However the pro-tocol was not secure enough to withstand the server spoofing attack

known session key attack

and replay attack.The absence of the origin recognition for the distributed session key accounts for the flaw.Accordingly

the security definition of the Bellare-Rogaway 3PKD model was corrected based on matching conversation.

关键词

Keywords

references

Views

718

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Analysis and improvement of the BACnet/IP based on identity authentication

Formal modeling and security analysis method of security protocol based on CPN

Security model without managers for blockchain trading system

Security analysis of security protocol Swift implementations based on computational model

Key distribution and recovery algorithm based on Shamir's secret sharing

Related Author

Jiafeng ZHU

Pengshou XIE

Yuxiang RAN

Wei LI

Tao FENG

Yongping KANG

Jinze DU

Tao FENG

Related Institution

School of Mechanical and Electrical Engineering, Lanzhou University of Technology

School of Computer and Communications, Lanzhou University of Technology

School of Computer and Communication, Lanzhou University of Technology

School of Computer Science and Engineering, Nanjing University of Science ＆Technology

School of Computer Science and Communication Engineering, Jiangsu University

AI问答

⁰