| 14 | 0 | 104 |
| 下载次数 | 被引频次 | 阅读次数 |
针对后量子扩展迪菲—赫尔曼(post-quantum extended Diffie-Hellman,PQXDH)协议混合密钥交换结构复杂和难以精确建模而导致形式化分析实现困难的问题,提出一种基于事件逻辑理论(logic of events theory, LoET)的形式化建模与验证方法。首先,在LoET框架下构建PQXDH协议的形式化模型,明确会话建立与密钥派生等关键流程;其次,引入密钥封装机制(key encapsulation mechanism,KEM)相关事件、公理与推理规则扩展了该逻辑,以更准确刻画后量子特性;最后,结合ProVerif工具进行验证,证明其满足认证性。结果表明,扩展后的LoET能够有效应用于PQXDH协议的形式化分析,从而促进后量子协议的应用与发展。
Abstract：To address the difficulty in implementing formal analysis caused by the complex hybrid keyexchange structure of the post-quantum extended Diffie-Hellman(PQXDH) protocol and the difficulty of precise modeling, a formal modeling and verification method based on the logic of events theory(LoET) was proposed. Firstly, a formal model of the PQXDH protocol was constructed within the LoET framework, and key processes such as session establishment and key derivation were specified. Secondly, the logic was extended by introducing KEM-related events, axioms, and inference rules, and post-quantum characteristics were characterized more accurately. Finally, verification was conducted in combination with the ProVerif tool, and the satisfaction of authentication properties was proved. The results indicated that the extended LoET was effectively applied to the formal analysis of the PQXDH protocol, thereby promoting the application and development of post-quantum protocols.
[1]罗俊.量子密钥分发和后量子密码融合研究[J].电信科学, 2025, 41(12):53-62.Luo J. Research on quantum key distribution and postquantum cryptography fusion[J]. Telecommunications Science, 2025, 41(12):53-62.
[2]王腾飞,张驰,谷大武. Kyber的安全硬件加速方案设计与实现[J].密码学报(中英文), 2025, 12(5):1118-1131.Wang T F, Zhang C, Gu D W. Design and implementation of secure hardware acceleration solution for Kyber[J]. Journal of Cryptologic Research, 2025, 12(5):1118-1131.
[3]Bhargavan K, Jacomme C, Kiefer F, et al. Formal verification of the PQXDH post-quantum key agreement protocol for end-to-end secure messaging[C]∥Proceedings of the 33rd USENIX Conference on Security Symposium.New York:ACM Press, 2024:469-486.
[4]Linker F, Sasse R, Basin D. A formal analysis of Apple′s iMessage PQ3 protocol[C]∥Proceedings of the 34th USENIX Security Symposium. Berkeley:USENIX Association,2025:5015-5034.
[5]Beguinet H, Chevalier C, Ricosset T, et al. Formal verification of a post-quantum Signal protocol with Tamarin[C]∥International Conference on Verification and Evaluation of Computer and Communication Systems. Cham:Springer International Publishing, 2024:105-121.
[6]肖美华,乔珊珊,杨科.基于时间-事件逻辑的IDAOFE协议形式化分析[J].郑州大学学报(理学版),2026, 58(2):48-54.Xiao M H, Qiao S S, Yang K. Formal analysis of IDAOFE protocol based on time-event logic[J]. Journal of Zhengzhou University(Natural Science Edition), 2026,58(2):48-54.
[7]Almuzaini N Z, Ahmad I. Formal analysis of the Signal protocol using the scyther tool[C]∥Proceedings of the2nd International Conference on Computer Applications&Information Security. Piscataway:IEEE Press, 2019:1-6.
[8]Fiedler R, Janson C. A deniability analysis of Signal′s initial handshake PQXDH[J]. Proceedings on Privacy Enhancing Technologies, 2024(4):907-928.
[9]Xiao M H, Bickford M. Logic of events for proving security properties of protocols[C]∥International Conference on Web Information Systems and Mining. Piscataway:IEEE Press, 2009:519-523.
[10]Bickford M, Constable R L. Automated proof of authentication protocols in a logic of events[C]∥Proceedings of the 6th International Verification Workshop. Manchester:EasyChair Publishing,2010:13-30.
[11]Li Z H, Xiao M H, Xu R H. Formal analysis of signal protocol based on logic of events theory[J]. Scientific Reports, 2024, 14:20606.
[12]Li Z H, Xiao M H, Xu Y P, et al. A novel symbolic model for analyzing Internet of Things protocols based on event logic[J]. Computers&Security, 2025, 154:104440.
[13]Xiao M H, Cheng W L, Fan H M, et al. Formal analysis of EAP-TLS protocol based on logic of events[J]. Symmetry, 2025, 17(9):1456.
[14]Fiedler R, Günther F. Security analysis of Signal′s PQXDH handshake[C]∥IACR International Conference on Public-Key Cryptography. Cham:Springer International Publishing,2025:137-169.
[15]Hashimoto K, Katsumata S, Wiggers T. Bundled authenticated key exchange:a concrete treatment of Signal′s handshake protocol and post-quantum security[C]∥Proceedings of the 34th USENIX Conference on Security Symposium. New York:ACM Press, 2025:6777-6796.
[16]Dodis Y, Jost D, Katsumata S, et al. Triple Ratchet:a bandwidth efficient hybrid-secure signal protocol[C]∥International Conference on the Theory and Applications of Cryptographic Techniques. Cham:Springer International Publishing, 2025:302-331.
基本信息:
DOI：10.13705/j.issn.1671-6841.2025140
中图分类号:O413;TN918.4
引用信息:
[1]肖美华,陈高翔,杨科,等.基于事件逻辑的PQXDH协议形式化分析[J].郑州大学学报(理学版)().DOI:10.13705/j.issn.1671-6841.2025140.
基金信息:
国家自然科学基金项目(61962020); 江西省“双千人才”项目(JXSQ2023201009); 江西省自然科学基金重点项目(20224ACB202006); 江西省职业早期青年科技人才培养专项(20244BCE52146)
2026-09-08
2026-09-08
2026-09-08