理想格上的多阶段认证密钥交换协议.

The existing lattice-based key exchange protocols generally base on the single-stage security models like Bellare-Rogaway, which ignoring the stage separation of session key’s construction in secure communication. In order to solve this problem, this paper proposed a lattice-based multi-stage authenticated key exchange protocol based on MSKE model. The scheme used pre-shared password for authentication, and the construction of multi-stage key exchange adopted the Peikert error-reconciliation mechanism and the server’s static key. The security analysis shows that the protocol only introduces a small computing overhead, allow the mutual authentication, two-stage perfect forward-secrecy, and resists quantum attack. This protocol meets the KD-2 FS-M security level under MSKE model. It is a simple and efficient post-quantum multi-stage key exchange protocol. [ABSTRACT FROM AUTHOR]