论文标题

分布式对称钥匙建筑:可扩展的,防量子的钥匙分配系统

Distributed Symmetric Key Establishment: A scalable, quantum-proof key distribution system

论文作者

Lo, Hoi-Kwong, Montagna, Mattia, von Willich, Manfred

论文摘要

我们为可扩展,具有成本效益的信息理论上安全的密钥分布和管理系统提出和实施协议。该系统称为分布式对称密钥建立(DSKE),依赖于DSKE客户端和一组安全中心之间的预共享随机数。任何组的DSKE客户端都可以使用DSKE协议从预共享数字中提取秘密密钥。通过秘密共享计划保护客户端免受安全枢纽的妥协,该方案允许创建最终密钥,而无需信任个人安全枢纽。确切地说,如果损坏的安全枢纽的数量不超过一定的阈值,则保证了DSKE客户的机密性,同时又稳健地抗拒绝服务(DOS)攻击。 DSKE系统可用于量子安全通信,可以轻松地集成到现有的网络基础架构中,并可以支持可以访问密钥的任意通信方组。我们讨论了高级协议,分析其安全性,包括其稳健性抵抗破坏。在两个遥远的客户端之间使用Amazon Web服务器上的安全集线器(AWS)节点较数千公里的人在两个遥远的客户之间进行了安全通信的证明证明,这表明了启用DSKE的秘密共享一次性PAD加密的可行性,其数据率高于50 mbit/s/s和低于70毫秒。

We propose and implement a protocol for a scalable, cost-effective, information-theoretically secure key distribution and management system. The system, called Distributed Symmetric Key Establishment (DSKE), relies on pre-shared random numbers between DSKE clients and a group of Security Hubs. Any group of DSKE clients can use the DSKE protocol to distill from the pre-shared numbers a secret key. The clients are protected from Security Hub compromise via a secret sharing scheme that allows the creation of the final key without the need to trust individual Security Hubs. Precisely, if the number of compromised Security Hubs does not exceed a certain threshold, confidentiality is guaranteed to DSKE clients and, at the same time, robustness against denial-of-service (DoS) attacks. The DSKE system can be used for quantum-secure communication, can be easily integrated into existing network infrastructures, and can support arbitrary groups of communication parties that have access to a key. We discuss the high-level protocol, analyze its security, including its robustness against disruption. A proof-of-principle demonstration of secure communication between two distant clients with a DSKE-based VPN using Security Hubs on Amazon Web Server (AWS) nodes thousands of kilometres away from them was performed, demonstrating the feasibility of DSKE-enabled secret sharing one-time-pad encryption with a data rate above 50 Mbit/s and a latency below 70 ms.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源