四川大学数学学院,四川,成都,610064
纸质出版:2005
移动端阅览
朱文余, 孙琦. 环Zn上椭圆曲线的密钥交换协议[J]. 电子学报, 2005,33(1):83-87.
ZHU Wen-yu, SUN Qi. The Elliptic Curves over Zn and Key Exchange Protocol[J]. Acta Electronica Sinica, 2005, 33(1): 83-87.
设n=pq
p
q为奇素数
环Z
n
上的椭圆曲线E
n
(a
b)的
SOM密钥交换协议与QV
密钥交换协议均选取E
n
(a
b)上的阶为M
n
=l
cm
{#E
p
(a
b)
#E
q
(a
b)}的点G作为公钥(称G为基点)
并且限定其对应的E
p
(a
b)和E
q
(a
b)均为循环群
这就限制了这两个协议只能选择一类特殊的椭圆曲线E
n
(a
b)构作密钥交换协议.本文指出
E
p
(a
b)和E
q(a
b)均为循环群这一限定是不必要的.本文给出了E
n
(a
b)上存在阶为M
n
的点G的一个充分必要条件
并给出一个例子
其中E
p
(a
b)为循环群
E
q
(a
b)为非循环群
且对应的E
n
(a
b)上有阶为M
n
的点G.同时
本文选取E
n
(a
b)上阶为l
cm
{n
1
m
1
}的点作为基点
这里n
1
m
1
分别为E
p
(a
b)和E
q
(a
b)的最大循环子群的阶.这样
就能够选择更多的椭圆曲线E
n
(a
b)
用来构作密钥交换协议(包括将两方之间的密钥交换协议扩展到三方).
SOM key exchange protocol and QV key exchange protocol were based on an elliptic curve
En(a
b)
over the ring
Z
n
with a point
G
of order
Mn=lcm{# Ep(a
b)
# Eq(a
b)}
where
n=pq
and
p
q
are odd primes.They pointed out that such a base point
G
exists if
Ep(a
b)
and Eq(a
b) are both cyclic groups.This restri
cts the choice of elliptic curves used to implement their protocols.In this paper we propose a necessary and sufficient condition under which
En(a
b)
has a point of order
Mn=lcm{# Ep(a
b)
# Eq(a
b)}
and show by an example that
En(a
b)
may have a point
G
of order
Mn
even if
Ep(a
b)
is a cyclic group and
Eq(a
b)
is not.Our generalization makes it possible to choose more elliptic curves to establish key exchange protocol.And we give a new three or more users key exchange protocol with a point of order
lcm{n
1
m
1
}
as base point
where
n
1
m
1
are respectively the order of the maximal cyclic subgroups of
Ep(a
b)
and
Eq(a
b).
0
浏览量
1201
下载量
8
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621