关键词: 密钥交换协议, 物理不可克隆函数, 模糊提取器, 消息认证

Abstract: This paper proposes a lightweight protocol that enables secure authentication between a cryptographic device（Device） and a server （Server） with a PUF entity and establishes a shared session key. The protocol uses fuzzy extractor for authentication and key extraction, and adopts the pseudo random function and XOR encryption for message authentication and data encryption communication at the same time, can effectively reduce the execution cost. In the protocol, the server only needs to store one challenge-response pair of the PUF in the device, which is used for the subsequent key update and exchange, and avoids the consumption of storage resources and data leakage problems caused by the acquisition of a large amount of challenge-response pairs. The analysis results show that the proposed protocol achieves mutual authentication and secure key exchange, can resist eavesdropping, tampering attacks, man-in-the-middle attack, DOS attack, modeling attack, invasive attack and other attack techniques.

Key words: key exchange protocol, Physical Unclonable Function（PUF）, fuzzy extractor, message authentication