Cryptographic communication apparatus and cryptographic communication system
There is provided a cryptographic communication apparatus for conducting a key exchange procedure with another cryptographic communication apparatus that shares a password. The apparatus includes a first encryption unit that encrypts information that is based on a first random number using a public key of the another apparatus, a second encryption unit that encrypts the information that is based on the first random number encrypted by the first encryption unit using the password, a third encryption unit that encrypts information that is based on a second random number using the first random number, and transmits a first signal and a second signal to the another apparatus, the first signal including the information that is based on the first random number encrypted by the second encryption unit, and the second signal including information that is based on the second random number encrypted by the third encryption unit.
1. A cryptographic communication apparatus for conducting a key exchange procedure with another cryptographic communication apparatus that shares a password with the cryptographic communication apparatus, the cryptographic communication apparatus comprising:
a random number generator that generates a first random number and a second random number;
a first encryption unit that encrypts information that is based on the first random number by the aid of a public key of the another cryptographic communication apparatus;
a second encryption unit that encrypts the information that is based on the first random number encrypted by the first encryption unit, by the aid of the password;
a third encryption unit that encrypts information that is based on the second random number by the aid of the first random number; and
a transmitter that transmits a first signal and a second signal to the another cryptographic communication apparatus, the first signal including the information that is based on the first random number encrypted by the second encryption unit, and the second signal including the information that is based on the second random number encrypted by the third encryption unit.
2. The cryptographic communication apparatus according to claim 1 , wherein
the transmitter sequentially transmits the first signal and the second signal to the another cryptographic communication apparatus.
3. The cryptographic communication apparatus according to claim 1 , wherein
the third encryption unit encrypts data known by the another cryptographic communication apparatus by the aid of the first random number and the second random number.
4. The cryptographic communication apparatus according to claim 2 , further comprising a receiver that receives a signal from the another cryptographic communication apparatus, wherein
the transmitter transmits the second random number to the another cryptographic communication apparatus when the receiver receives a signal proving that the another cryptographic communication apparatus has the password from the another cryptographic communication apparatus.
5. The cryptographic communication apparatus according to claim 3 , wherein
the known data includes a communication history in the key exchange procedure between the cryptographic communication apparatus and the another cryptographic communication apparatus.
6. The cryptographic communication apparatus according to claim 5 , wherein
the transmitter transmits the first signal as a key exchange signal on the basis of SSL handshake, and transmits the second signal as a verification signal on the basis of SSL handshake.
7. A cryptographic communication system for conducting a key exchange procedure between a first cryptographic communication apparatus and a second cryptographic communication apparatus that share a password with each other, wherein
the first cryptographic communication apparatus includes:
a random number generator that generates a first random number and a second random number;
a first encryption unit that encrypts information that is based on the first random number by the aid of a public key of the second cryptographic communication apparatus;
a second encryption unit that encrypts the information that is based on the first random number encrypted by the first encryption unit, by the aid of the password;
a third encryption unit that encrypts information that is based on the second random number by the aid of the first random number; and
a transmitter that transmits a first signal and a second signal to the second cryptographic communication apparatus, the first signal including the information that is based on the first random number encrypted by the second encryption unit, and the second signal including the information that is based on the second random number encrypted by the third encryption unit, and
the second cryptographic communication apparatus includes:
a receiver that receives the first signal and the second signal;
a first decryption unit that decrypts the information that is based on the first random number encrypted by the second encryption unit by a secret key paired with the public key and the password to acquire the first random number; and
a second decryption unit that calculates the second random number according to the information that is based on the second random number encrypted by the third encryption unit by the aid of the first random number acquired by the first decryption unit.