为提高Kerberos协议的安全性,引入了辫子群上非共轭变换和多变量方程组结合所构造的难解问题,提出了一种基于辫子群上的公钥加密算法的Kerberos协议和基于此协议的公钥体系KBGS(Kerberos on braid groups system),系统主要加强了客户和认证中心之间的通讯安全强度。安全性分析结果表明,改进后的Kerberos协议能抵御高强度的明文攻击,适用于量子计算机时代的公钥密码平台,更具安全性和实用性。
To improve the security of Kerberos protocol, the hard problem is adopted which is constructed by combining the non-conjugate transformation and multi-variable equations based on braid groups, the public key encryption algorithm Kerberos protocol and the KBGS (Kerberos on braid groups system) based on this protocol is proposed, the system strengthens the communication safety intensity between the client and the certification center. The results show that the improved Kerberos protocol can resist high-intensity clear text attacks, and it can be well applied to PKI platform of the quantum computer, therefore, it has more security and practicality.