Encapsulation method and encapsulation system for certificate-based key with label

Abstract

The invention discloses an encapsulation method for a certificate-based key with a label, which comprises the following steps of: generating system parameters needed in encryption and decryption; the user generating a private key and a public key of the user according to the system parameters; an authentication center centre generating a user certificate according to the identity of the user, the public key, the system parameters and the own main key, and sending the certificate to the user; a sender generating symmetrically encrypted keys and internal state information according to the identity of a receiver, the public key and the system parameters; the sender generating encapsulation corresponding to the key according to the internal state information and the label and sending the encapsulation and the label to the receiver; the receiver using the private key, the certificate and the label thereof for decapsulation, and recovering the symmetrically encrypted keys. The method provides the most important part for a safe and efficient hybrid encryption method based on certificate, so that the encryption method has higher safety performance and high encryption speed and decryption speed. The invention further discloses an encapsulation system for a certificate-based key with a label.

Description

technical field [0001] The invention relates to a key encapsulation technology, in particular to a label-based certificate key encapsulation method and system. Background technique [0002] One of the main tasks of cryptography is to secure messages sent over public channels. At present, there are mainly two ways to achieve this goal: using public key cryptography to encrypt messages or using symmetric cryptography to encrypt plaintext. Encryption using public key cryptography not only slows the speed of encryption and decryption (compared with the speed of symmetric encryption and decryption), but also limits the plaintext space or requires the plaintext to belong to a certain group, which is not practical in practical applications. However, the encryption and decryption speed of the symmetric cryptosystem is fast, and there is no advantage in restricting the length of the plaintext, but there are difficulties in key management. Based on the consideration of speed and sec...

Images