Denning-Sacco密钥分配协议的分析与改进.PDF

35 2 () http: / /www. kustjourna.l com / o.l 35 No2 20104 Journal ofKunm ingUniversity of Science andTechnology ( Science andTechnology) Apr. 2010 do:i 10. 3969/j. issn. 1007- 855x. 2010. 02. 016 Denning- Sacco 缪祥华 ( , 650051) : 研究了Denning- Sacco密钥分配协议,指出了该协议存在的缺陷和漏洞,并给出了两种攻 击该协议的方法, 一种是重 攻击, 另 一种是拦截攻击. 虽然一些学者对该协议进行了修改,但是 仍然存在缺陷和漏洞.针对原始协议存在的缺陷和漏洞, 该文在原来协议的基础上, 增加了一条 消息,并用串空间模型来分析了修改后的协议,说明修改后的协议能够达到协议的目标. : 协议分析; 串空间; Denning- Sacco密钥分配协议 : TP309 : A : 1007- 855X( 2010) 02- 0076- 05 Analysis and Impro em ent of Denning- Sacco Key D istribution Protocolwith Public Key M AI O X iang-hua (Faculty of Information Engineering andAutomation, Kunm ing University ofScience andTechnology, Kunm ing 650051, China) Abstract: Denning-Sacco key protocolw ith public key is researched in this paper. The bugs and leaks existing in theprotocolare pointed out. Twomethods to attack the protocolare then put forward, nam ely replaying attack and holdingup attack respectively. A message is added to the protocolto mi prove it. Finally, strand spacemodel is adopted to analyze the mi proved protocol, the result ofwhich indicates the feasibility of themethod. K ey words: protocolanalysis; strand space; Denning-Sacco key distribution protocolw ith public key 0 20, , [ 1] .,, [ 2] [3] [ 4- 7] . , ., [ 8] 1. Denning- Sacco , , , , , ., Denning- Sacco, ,, , . 1 ,[ 4- 7]. : 2009- 03- 10.: (: 07C10075); (: 2007- 29). : ( 1972- ), ,, .: . E- ma il: xianghuam iao@ 126. com 2 : Denning- Sacco