增强TLS 1.3中Early data安全性的协议

张兴隆; 程庆丰; 马建峰

doi:10.11959/j.issn.2096-109x.2017.00224

您当前的位置：

首页 >

文章列表页 >

增强TLS 1.3中Early data安全性的协议

学术论文 | 更新时间：2024-06-03

- 增强TLS 1.3中Early data安全性的协议
- Protocol to enhance the security of Early data in TLS 1.3
- 网络与信息安全学报 2017年3卷第12期页码：22-30
- 作者机构：
  
  1. 信息工程大学，河南郑州 450004
  2. 西安电子科技大学计算机学院，陕西西安 710071
- 作者简介：
  
  [ "张兴隆（1994-），安徽滁州人，信息工程大学硕士生，主要研究方向为密码学和信息安全。" ]
  [ "程庆丰（1979-），辽宁朝阳人，博士，信息工程大学副教授，主要研究方向为密码学和信息安全。" ]
  [ "马建峰（1963-），男，陕西西安人，西安电子科技大学教授、博士生导师，主要研究方向为密码学、无线和移动安全。" ]
- 基金信息：
  
  国家高技术研究发展计划（“863计划）基金资助项目;The National High Technology Research and Development Program of China (863 Program)(2015AA016007);密码科学技术国家重点实验室开放课题基金资助项目;The National Key Laboratory Foundation of Cryptography(MMKFKT201514)
- DOI：10.11959/j.issn.2096-109x.2017.00224
  中图分类号： TP309
- 网络首发：2017-12，
  
  纸质出版：2017-12-15
- 稿件说明：
移动端阅览
张兴隆, 程庆丰, 马建峰. 增强TLS 1.3中Early data安全性的协议[J]. 网络与信息安全学报, 2017,3(12):22-30.

Xing-long ZHANG, Qing-feng CHENG, Jian-feng MA. Protocol to enhance the security of Early data in TLS 1.3[J]. Chinese Journal of Network and Information Security, 2017, 3(12): 22-30.
张兴隆, 程庆丰, 马建峰. 增强TLS 1.3中Early data安全性的协议[J]. 网络与信息安全学报, 2017,3(12):22-30. DOI： 10.11959/j.issn.2096-109x.2017.00224.

Xing-long ZHANG, Qing-feng CHENG, Jian-feng MA. Protocol to enhance the security of Early data in TLS 1.3[J]. Chinese Journal of Network and Information Security, 2017, 3(12): 22-30. DOI： 10.11959/j.issn.2096-109x.2017.00224.

摘要

将新型0-RTT密钥交换协议思想借鉴到TLS 1.3会话重用阶段，构建rFSOPKE协议，改进了Early data的加密和传输过程。rFSOPKE协议可以在Ticket有效期内保护Early data的前向安全性并使其抵抗重放攻击。与改进前Early data的发送过程相比，本协议大幅增强了Early data的安全性。在实现效率方面，由于在发送Early data时增加了本协议的计算和传输开销，所以实现效率有所降低。但是本协议可以根据应用场景的不同嵌入适合的算法，所以可以选择更加高效的算法提高协议实现速度。

Abstract

The new 0-RTT Internet key exchange was drawn on the TLS 1.3 session resumption phase

the rFSOPKE protocol was constructed

and the Early data encryption and transmission process were improved.The rFSOPKE protocol can protect the forward security of Early data and protect it from replay attacks during the validity period of the Ticket.Compared with the previous Early data transmission process

rFSOPKE greatly enhanced the security of Early data.Due to the increase in the calculation and transmission overhead of this protocol when sending Early data

the efficiency of the protocol is reduced.However

rFSOPKE can embed the appropriate algorithm according to the different application environment

so more efficient algorithms should be chosen to improve the protocol implementation speed.

关键词

Keywords

references

KRAWCZYK H , . HMQV:a high-performance secure Diffie-Hellman protocol [C ] // The International Cryptology Conference . 2005 : 546 - 566 .

CUI Y , LI T , LIU C , et al . Innovating transport with QUIC:design approaches and research challenges [J ] . IEEE Internet Computing , 2017 , 21 ( 2 ): 72 - 76 .

RESCORLA E . The transport layer security(TLS)protocol version 13-draft-ietf-tls-tls13-07 [DB/OL ] . https://tools.ietf.org/html/draft-ie tf-tls-tls13-07 https://tools.ietf.org/html/draft-ie tf-tls-tls13-07 .

FISCHLIN M , GÜNTHER F , . Multi-stage key exchange and the case of Google's QUIC protocol [C ] // The ACM CCS . 2014 : 1193 - 1204 .

KRAWCZYK H , WEE H . The OPTLS protocol and TLS 13 [C ] // The IEEE European Symposium on Security and Privacy . 2016 : 81 - 96 .

CREMERS C , HORVAT M , SCOTT S , et al . Automated analysis and verification of TLS 1.3:0-RTT,resumption and delayed authentication [C ] // Security and Privacy . 2016 : 470 - 485 .

RESCORLA E . The transport layer security(TLS)protocol version 1.3-draft-ietf-tls-tls13-10 [EB/OL ] . https://tools.ietf.org/html/draft-ie tf-tls-tls13-10 https://tools.ietf.org/html/draft-ie tf-tls-tls13-10 .

FISCHLIN M , GÜNTHER F , . Replay attacks on zero round-trip time:the case of the TLS 1.3 handshake candidates [C ] // IEEE European Symposium on Security and Privacy . 2017 : 82 - 113 .

HALE B , JAGER T , LAUER S , et al . Simple security definitions for and constructions of 0-RTT key exchange [C ] // The International Conference on Applied Cryptography and Network Security . 2017 : 20 - 38 .

CANETTI R , HALEVI S , KATZ J . A forward-secure public-key encryption scheme [J ] . Journal of Cryptology , 2007 , 20 ( 3 ): 265 - 294 .

POINTCHEVAL D , SANDERS O . Forward secure non-interactive key exchange [C ] // The International Conference on Security and Cryptography for Networks . 2014 : 21 - 39 .

COHN-GORDON K , CREMERS C , GARRATT L . On postcompromise security [C ] // Computer Security Foundations Symposium . 2016 : 164 - 178 .

GÜNTHER F , HALE B , JAGER T , et al . 0-RTT key exchange with full forward secrecy [C ] // The International Conference on the Theory and Applications of Cryptographic Techniques . 2017 : 519 - 548 .

DELIGNAT-LAVAUD A , FOURNET C , KOHLWEISS M , et al . Implementing and proving the TLS 1.3 record layer [C ] // The 2017 Security and Privacy . 2017 : 463 - 482 .

BHARGAVAN K , BLANCHET B , KOBEISSI N . Verified models and reference implementations for the TLS 1.3 standard candidate [C ] // The 2017 Security and Privacy . 2017 : 402 - 422 .

RESCORLA E . The transport layer security(TLS)protocol version 1.3-draft-ietf-tls-tls13-13 [DB/OL ] . https://tools.ietf.org/html/draft-ie tf-tls-tls13-13 https://tools.ietf.org/html/draft-ie tf-tls-tls13-13 .

RESCORLA E . The transport layer security(TLS)protocol version 1.3-draft-ietftls-tls13-12 [DB/OL ] . https://tools.ietf.org/html/draft-ietftls-tls13-12 https://tools.ietf.org/html/draft-ietftls-tls13-12 .

RESCORLA E . The transport layer security(TLS)protocol version 1.3-draft-ietf-tls-tls13-18 [DB/OL ] . https://tools.ietf.org/html/draftietf-tls-tls13-18 https://tools.ietf.org/html/draftietf-tls-tls13-18 .

KRAWCZYK H , . The order of encryption and authentication for protecting communications(or:how secure is SSL?) [C ] // CRYPTO . 2001 : 310 - 331 .

GOLDREICH O , GOLDWASSER S , MICALI S . How to construct random functions [C ] // Foundations of Computer Science . 1984 : 464 - 479 .

KRAWCZYK H , . Cryptographic extraction and key derivation:the HKDF scheme [C ] // CRYPTO . 2010 : 631 - 648 .

GROTH J , . Simulation-sound NIZK proofs for a practical language and constant size group signatures [C ] // The International Conference on Theory and Application of Cryptology and Information Security . 2006 : 444 - 459 .

BLAZY O , KILTZ E , PAN J . (Hierarchical) Identity-based encryption from affine message authentication [C ] // The International Cryptology Conference . 2014 : 408 - 425 .

浏览量

4427

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

轻量级门限群签名方案的改进