关键词: 组合公钥，Canetti-Krawczy模型，消息传输认证器，认证密钥协商

Abstract: Since ECDH was easily suffered from man-in-the-middle attack, a provable secure improved ECDH in the Canetti Krawczy(CK) model was presented. Combined with CPK, a security and efficient fast authentication protocol was devised based on the modular approach of Canetti Krawczyk(CK) model. It also designed and improved a message transmission authenticator in which the key of symmetric encryption algorithm was dynamically generated. It realized session key association and confirmation meanwhile mutual authentication. Analysis shows it has better security and performance.

Key words: Combined public key, Canetti-Krawczy model, Message transmission authenticator, Authenticated key agreement