抗中间人攻击的密码协议研究

项目名称： 抗中间人攻击的密码协议研究

项目编号： No.61303201

项目类型： 青年科学基金项目

立项/批准年度： 2014

项目学科： 自动化技术、计算机技术

项目作者： 张宗洋

作者单位： 上海交通大学

项目金额： 23万元

中文摘要： 承诺方案和零知识协议是密码学的两个最基本的组件，它们在当代密码学中处于非常重要的基础性地位，而且在其它密码学协议和更高级的安全系统有着广泛的应用。鉴于这两个组件被广泛部署在分布式网络环境中，而在此环境下中间人攻击是一个十分常见的动态攻击形式，因此对中间人攻击的研究具有十分重要的理论意义和应用价值。目前很多研究需要有初始设置假设或者不能够完美抵抗实际中出现的中间人攻击，因此需要进一步加强对这两个密码学组件的研究。本项目在朴素模型下，即没有任何设置假设的情况下，以可证明安全性理论为依托，从四个方面深入考察适应性中间人攻击和各种旁路攻击方法，包括抗适应性中间人攻击的承诺方案研究、抗适应性中间人攻击的零知识协议研究、同时抗旁路攻击和抗适应性中间人攻击的零知识协议研究、及抗适应性中间人攻击的承诺方案和零知识协议的应用研究。期望本项目的研究能够丰富和完善承诺方案和零知识协议的理论。

中文关键词： 零知识证明；承诺方案；中间人攻击；黑盒分离；公钥加密

英文摘要： Commitment schemes and zero-knowledge protocols are two basic tools in cryptography. They play very important and fundamental roles in modern cryptography, and have wide applications in other cryptographic protocols and advanced secure systems. Since these two tools are widely applied in distributed network environment, and man-in-the-middle attacks are very common in such environment, it is of great theoretical significance and application values to do research on man-in-the-middle attacks. As most of current research needs trusted setup assumptions or cannot perfectly prevent man-in-the-middle attacks in the practice, it is very necessary to strengthen research on these two tools. This project takes further research on adaptive man-in-the-middle attacks and other side-channel attacks, and uses provable security theory to study these attacks in the plain model from the following four aspects: research on commitment schemes preventing adaptive man-in-the-middle attacks, research on zero-knowledge protocols preventing adaptive man-in-the-middle attacks, research on zero-knowledge protocols preventing both adaptive man-in-the-middle attacks and side-channel attacks, and research on the application of commitment schemes and zero-knowledge protocols preventing man-in-the-middle attacks. We hope that this project

英文关键词： zero-knowledge proof；commitment schemes；man-in-the middle attack；black-box seperations；public key encryption