基于传统公钥基础设施的密钥协商性能优化研究

Research on Performance Optimization of Key Agreement Based on Traditional Public Key Infrastructure

摘要: 传统基于公钥基础设施的密钥协商算法在支持完美前向保密时，需要频繁的密钥协商，且协商步骤复杂，还使用了耗时的非对称密钥算法，性能消耗严重，不适用于资源有限的嵌入式设备中。针对以上问题，本文优化了传统公钥基础设施密钥协商方案，密钥信息不需要频繁通过网络交换，而是双方在本地动态生成密钥，保证了每次加密密钥不同，支持了完美前向保密的特性。实验结果表明，优化后的密钥协商方案性能相比于基于传统公钥基础设施的密钥协商方案显著提升。

Abstract: When the traditional key agreement algorithm based on public key infrastructure supports perfect forward secrecy, frequent key agreement is required, and the negotiation steps are complicated. It also uses a time-consuming asymmetric key algorithm, which consumes a lot of performance and is not suitable for embedded devices with limited resources. In response to the above problems, this paper optimizes the traditional public key infrastructure key agreement scheme. The key infor-mation does not need to be frequently exchanged through the network, but the two parties dynamically generate the key locally, which ensures that the encryption key is different each time, and supports perfect forwarding characteristic of secrecy. The experimental results show that the performance of the optimized key agreement scheme is significantly improved compared with the key agreement scheme based on traditional public key infrastructure.