Abstract: The computing cost of the bilinear pairing is high, and there is the fault of known session-specific temporary information in two key agreement protocols without bilinear pairing. This paper proposes a certificateless implicit authentication and key agreement protocol without bilinear pairing, and proves its security in the random oracle model. The new protocol is based on the elliptic curve computational Diffie-Hellman assumption, requires only three times scalar multiplication operation of point in elliptic curve. The computing costs of this protocol are lower than those of the other ones that are the same type with the one in this paper. In addition, the new protocol adopts the implicit authentication scheme that achieves the known session-specific temporary information security, which precedes the existing ones.

Key words: certificateless, bilinear pairing, elliptic curve, implicit authentication, key agreement

摘要： 由于对运算的计算量较大，且现有无双线性对的密钥协商协议存在会话临时秘密值泄露安全缺陷，提出一种无需对运算的无证书隐式认证和密钥协商协议，在随机预言机模型下证明了新协议的安全性。新协议基于椭圆曲线上的CDH假设，仅需要三次椭圆曲线上的点乘运算，计算开销低于同类型其他协议。新协议采用隐式认证方式避免了现有方案中存在的会话临时秘密值泄露安全缺陷。

关键词: 无证书, 双线性对, 椭圆曲线, 隐式认证, 密钥协商