Enhancing Double Ratchet Algorithm with Pre-Shared Key Mechanism and Optimal KDF Selection
摘要
The double ratchet algorithm, widely used in secure messaging systems like Signal and WhatsApp, ensures forward secrecy and robust key management. This paper proposes two enhancements to strengthen its security and efficiency. First, pre-shared keys (PSKs) are introduced during initialization to improve entropy and defend against active attacks such as state injection and desynchronization. Second, a comparative analysis of SHA-256, BLAKE2s, and BLAKE3 is conducted to evaluate their performance as key derivation functions (KDFs) within the algorithm. Results show that BLAKE3 achieves a strong balance between speed and security. The improved design reduces computational overhead and enhances resilience, making it suitable for resource-limited and latency-sensitive applications.