Current methods for authentication and key agreement based on public-key cryptography are vulnerable to quantum computing. We propose a novel approach based on artificial intelligence research in which communicating parties are viewed as autonomous agents which interact repeatedly using their private decision models. Authentication and key agreement are decided based on the agents' observed behaviors during the interaction. The security of this approach rests upon the difficulty of modeling the decisions of interacting agents from limited observations, a problem which we conjecture is also hard for quantum computing. We release PyAMI, a prototype authentication and key agreement system based on the proposed method. We empirically validate our method for authenticating legitimate users while detecting different types of adversarial attacks. Finally, we show how reinforcement learning techniques can be used to train server models which effectively probe a client's decisions to achieve more sample-efficient authentication.
翻译:以公用钥匙加密法为基础的当前认证和关键协议方法很容易被量子计算; 我们提出基于人工情报研究的新办法,其中将通信方视为自主代理,利用私人决定模式反复互动; 认证和关键协议是根据代理人在互动过程中观察到的行为决定的; 这种方法的安全取决于从有限的观测中模拟互动代理方决定的难度, 我们推测量子计算也很难解决这个问题; 我们释放了PyAMI, 这是一种基于拟议方法的原型认证和关键协议系统。 我们用经验验证了我们验证合法用户的方法,同时发现不同类型的对抗性攻击。 最后, 我们展示了如何利用强化学习技术来培训服务器模型,有效地检测客户的决定,以获得更高效的认证。