Key agreement and transport protocol

摘要

A key establishment protocol includes the generation of a value of cryptographic function, typically a hash, of a session key and public information. This value is transferred between correspondents together with the information necessary to generate the session key. Provided the session key has not been compromised, the value of the cryptographic function will be the same at each of the correspondents. The value of the cryptographic function cannot be compromised or modified without access to the session key.

主权项

1. A method of symmetric key agreement between a first communication device and a second communication device in a data communication system, each of said first communication device and said second communication device having a master key K, said method comprising:
said first communication device generating a first value X and providing said first value X to said second communication device; said second communication device generating a second value Y and computing a shared key k by operating a keyed cryptographic function on a combination of said first value X and said second value Y, said second communication device using said master key K as an input to said keyed cryptographic function; said second communication device providing said second value Y to said first communication device; and said first communication device computing said shared key k by operating said keyed cryptographic function on said combination of said first value X and said second value Y, said first communication device using said master key K as an input to said keyed cryptographic function.