一种新型基于环上带误差学习问题的认证密钥交换方案

摘要

利用格上判定带误差学习问题(Ring-DLWE)困难假设，该文基于Peikert的调和技术构造认证密钥交换方案。在标准模型下，该方案是CK模型中可证明安全的，并达到弱前向安全性(wPFS)。与现有的基于LWE的密钥交换方案相比，该方案使用平衡的密钥提取函数，因而保护共享会话密钥，同时因其基于格中困难问题，所以能抵抗量子攻击。%Using the hard assumption of Ring-Decision Learning With Errors (Ring-DLWE) in the lattice, a new Authenticated Key Exchange (AKE) scheme is proposed, which is based on the Peikert’s reconciliation technique. Under the standard model, the proposed scheme is provably secure in the CK model, which is additionally achieves weak Perfect Forward Secrecy (wPFS). Compared with the current Key Exchange (KE) schemes based on the LWE, the proposed scheme not only protects the shared session key with balanced key derivation function but also resists quantum attacks because of the hard assumption on lattice problem.