本文提出了一種基于AES 實(shí)現(xiàn)的口令認(rèn)證方法。該算法不使用公開(kāi)密鑰算法，僅采用AES 進(jìn)行遠(yuǎn)程用戶的身份認(rèn)證。該方法具有速度快，安全性高的特點(diǎn)，易于采用令牌（Token）或IC 卡硬件實(shí)現(xiàn)。在本文的最后，還對(duì)認(rèn)證協(xié)議的安全性進(jìn)行了討論。
關(guān) 鍵 詞： AES；哈希函數(shù)；認(rèn)證協(xié)議
Abstract： An AES-based password authentication mechanism is proposed. The algorithm overcomes the conventional synchronization problem based on counter mode. Based on AES----a absolutely secure algorithm under present technology, this mechanism can be implemented with the properties of fast speed and high security, and it is easier to be implemented by Token or IC card hardware. Besides, one authentication protocol
is proposed, which is aimed at satisfying security and created by final authorization passcode and digital signature that is built by userID and local token. In the end, the security problems of the protocol at two aspects----algorithm security and protocol security are discussed, and AES-based password protocol is with high security is the result.
Key words： AES；Hash technology；Validation protocol