A New Post-Quantum Identity-Based Authenticated Key Agreement Mechanism for TLS Handshake

Abstract:
In recent years, the rapid development of quantum computing technology has brought unprecedented challenges to current public network infrastructures which highly depend on such classical public key cryptosystems as Diffie-Hellman, RSA, ECC and so on. It has been of realistic significance to practice quantum security guarantee. In this paper, an identity-based authenticated key agreement mechanism from lattice for the handshake process of the latest version of Transport Layer Security protocol (TLS 1.3) is proposed. The underlying authenticated key agreement protocol is transformed from an identity-based encryption scheme on lattice, which attains implicit authentication without employing any public key signature algorithm with a high overhead. Due to using the identity-based authenticated key agreement protocol from lattice, the proposed TLS handshake authenticated key agreement mechanism eliminates the need of public key certificates and avoids the deployment of a large Public Key Infrastructure. At the same time, the security of the scheme is based on the problem of lattice, and can resist quantum computing attacks. Compared with current other related post-quantum cryptographic schemes, the scheme has more advantages on security and implementation efficiency.