基于SM2算法的协同签名及解密方案设计与实现

DESIGN AND IMPLEMENTATION OF COOPERATIVE SIGNATURE AND DECRYPTION SCHEME BASED ON SM2 ALGORITHM

  • 摘要: 面向既有终端开放环境下的私钥保护问题,基于标准SM2密码算法设计一个协同签名和协同解密方案C-SM2。双方首先各自独立产生子私钥,并协同产生公钥。对数据进行私钥签名或解密操作时,需双方协同运算才能完成,攻击任何一方均无法获取完整私钥,进而无法伪造签名或者解密数据,充分保证了SM2算法在开放环境下的安全性。方案适用于在软件密码模块中保护SM2私钥存储安全和运行安全,也适用于其他需要协同签名、协同运算的场景。

     

    Abstract: Aimed at the problem of private key protection in the open environment of existing terminals, a cooperative signature and cooperative decryption scheme C-SM2 is designed based on the standard SM2 cryptographic algorithm. Both parties independently generated the child private key, and cooperated to generate the public key. When the private key signature or decryption operation was performed on the data, both parties needed to cooperate to complete the operation. Neither party could obtain the complete private key, and thus could not forge the signature or decrypt the data, which fully ensured the security of the SM2 algorithm in the open environment. The scheme was applicable to protect the storage security and operation security of SM2 private key in the software cryptographic module, and was also applicable to other scenarios requiring collaborative signature and collaborative operation.

     

/

返回文章
返回