comments on the sm2 key exchange protocol

ISCAS OpenIR

	comments on the sm2 key exchange protocol
	Xu Jing; Feng Dengguo
	2011
会议名称	10th International Conference on Cryptography and Network Security, CANS 2011
会议录名称	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
页码	160-171
会议日期	December 1
会议地点	Sanya, China
收录类别	EI
ISSN	0302-9743
ISBN	9783642255120
部门归属	(1) State Key Laboratory of Information Security Institute of Software Chinese Academy of Sciences Beijing China
摘要	SM2 key exchange protocol is one part of the public key cryptographic algorithm SM2 which has been standardized by Chinese state cryptography administration for commercial applications. It became publicly available in 2010 and since then it was neither attacked nor proved to be secure. In this paper, we show that the SM2 key exchange protocol is insecure by presenting realistic attacks in the Canetti-Krawczyk model. The demonstrated attack breaks session-key security against an adversary who can only reveal session states. We also propose a simple modification method to solve this problem. © 2011 Springer-Verlag.; SM2 key exchange protocol is one part of the public key cryptographic algorithm SM2 which has been standardized by Chinese state cryptography administration for commercial applications. It became publicly available in 2010 and since then it was neither attacked nor proved to be secure. In this paper, we show that the SM2 key exchange protocol is insecure by presenting realistic attacks in the Canetti-Krawczyk model. The demonstrated attack breaks session-key security against an adversary who can only reveal session states. We also propose a simple modification method to solve this problem. © 2011 Springer-Verlag.
关键词	Cryptography
主办者	National Natural Science Foundation of China (NSFC); Shandong University (SDU)
语种	英语
内容类型	会议论文
URI标识	http://ir.iscas.ac.cn/handle/311060/16243
专题	中国科学院软件研究所
推荐引用方式 GB/T 7714	Xu Jing,Feng Dengguo. comments on the sm2 key exchange protocol[C],2011:160-171.