首页|非交互密钥协商综述

非交互密钥协商综述

扫码查看
非交互密钥协商作为一种重要的密码学原语是一种极具潜力的安全信道建立范式,持续受到学术界和工业界的密切关注.本文综述了非交互密钥协商协议的发展概况以及待解决的问题.有别于以往的综述,我们在对传统的非交互密钥协商协议进行全面回顾的同时,还对由消息层安全协议衍生的一类部分非交互密钥协商协议进行了深入的探讨.这类协议的突出特点在于,它们能够(部分)非交互式地为群组建立(初次)会话密钥;且后续在群组需要动态变化时,仅需其中一个参与者发送一条请求消息,其他参与者进行监听就能完成群组会话密钥的更新.此外,本文首次讨论了一种基于非对称群密钥协商构造多方非交互密钥协商协议的潜在技术路线,以及利用区块链技术作为公钥基础设施扩充组件用于解决非交互密钥协商协议设计中潜在风险的方法.
A Survey of Non-Interactive Key Exchange
Key exchange protocol serve as a fundamental cryptographic primitive,traditionally involving participants in one or multiple communication rounds to establish a shared session key.However,the innovation of non-interactive key exchange protocols revolutionizes this process,allowing participants to derive a session key without direct communication.This feature is partic-ularly valuable in scenarios where real-time interaction is impractical,making non-interactive key exchange a promising paradigm for secure communication channels,drawing significant attention from academic and industrial communities.This paper aims to provide a comprehensive survey of the developmental trajectory in the field of non-interactive key exchange protocols and the current unresolved challenges in this domain.In contrast to prior survey papers,our survey involves not only an in-depth examination of the evolution of traditional non-interactive key exchange protocols,but also partially non-interactive key exchange protocols which stem from message-layer secure protocols proposed by researchers affiliated with the Internet Engineering Task Force(IETF).Notably,these partially non-interactive key exchange protocols enable a group of participants to establish session keys in a(partial)non-interactive manner.This partial non-interactivity offers a nuanced perspective,especially beneficial in dynamic group communication scenarios.In such a scenario,when there is a dynamic change in participant composition within the group,only one participant needs to send a request message,while the others simply listen to it in order to complete the update of the group session key.Consider a scenario where there is a dynamic change in participant composition within the group.This process enhances the adaptability and security of group communication.Additionally,this paper introduces,for the first time,a potential solution for constructing multi-party non-interactive key exchange protocols based on asymmetric group key agreement which allows a group of participants to negotiate a public group encryption key and each participant's own unique decryption key.We note that,currently,the existing multi-party non-interactive key exchange protocols rely on complex cryptographic primitives such as multilinear mappings and indistinguishability obfuscation.Our innovative approach offers a new potential solution for secure non-interactive key exchange in scenarios involving multiple participants without the need for complex cryptographic primitives such as multilinear mappings and indistinguishability obfuscation.Finally,this paper explores the integration of blockchain technology as an extended component of the Public Key Infrastructure(PKI)to mitigate potential risks in the design of non-interactive key agreement protocols.Specifically,within a non-interactive key exchange protocol based on PKI,a category of malicious behavior by adversaries,termed PKI attacks,is identified.In these attacks,an adversary has the capability to register an arbitrary public key in the PKI as the public key of a specific participant.This sophisticated form of attack not only undermines the trust of the PKI but also the security associated with non-interactive key exchange protocols.By leveraging blockchain technology,this approach enhances the security of participant public key registration,thereby mitigating the risk of adversaries manipulating the PKI and executing such malicious PKI attacks.In summary,non-interactive key exchange transforms secure communication,especially in dynamic group scenarios.This survey explores traditional and partially non-interactive protocols,introducing a novel multi-party solution and advocating blockchain integration to counter PKI attacks.

key exchangegroup key exchangenon-interactive key exchangemessaging layer security

张明瑞、张蕊、张磊

展开 >

华东师范大学软件工程学院上海市高可信计算重点实验室 上海 200062

软硬件协同设计技术与应用教育部工程研究中心 上海 200062

密钥协商 群密钥协商 非交互密钥协商 消息层安全协议

国家自然科学基金国家自然科学基金

6237217761972159

2024

计算机学报
中国计算机学会 中国科学院计算技术研究所

计算机学报

CSTPCD北大核心
影响因子:3.18
ISSN:0254-4164
年,卷(期):2024.47(3)
  • 50