Digital signature method, digital signature equipment, password operation method in digital signature, and server

Abstract

The invention provides a digital signature method and digital signature equipment. The method comprises the following steps: receiving parameters (e, Xe) transmitted by a server, wherein Xe is equal to eG, e is a true random number generated by the server, and G is a generator of an elliptic curve cryptosystem; acquiring signature parameters (ki, Xi) according to the parameters (e, Xe) and locally held parameters (ki-1, Xi-1), wherein Xi-1 is equal to ki-1G; executing digital signature by utilizing the signature parameters (ki, Xi). In addition, the invention also provides a password operation method in the digital signature and the server. The method comprises the following steps: generating the true random number e according to a preset cycle; calculating and storing the parameters (e, Xe), wherein Xe is equal to eG, and G is the generator of the elliptic curve cryptosystem; transmitting the parameters (e, Xe) to a client which executes the signature, wherein the client acquires the signature random number (ki, Xi) according to the parameters (e, Xe) and the parameters (ki-1, Xi-1) and executes the digital signature according to the (ki, Xi). By the technology disclosed by the invention, the leak of privacy that a service network acquires the password operation of a user when a digital signature algorithm is subjected to outsourcing process is avoided; the privacy of outsourcing password operation is guaranteed; the signature security is guaranteed.

Description

technical field [0001] The invention relates to the technical field of cryptography, in particular to a digital signature method and equipment, a cryptographic operation method in digital signatures and a server. Background technique [0002] The basic principle of elliptic curve cryptography (ECC) is to perform point multiplication on a predefined elliptic curve Among them, the point G is a fixed parameter, and k is a large number generated randomly. In order to ensure the security of the digital signature algorithm itself, k is required to be a real physical random number. The point multiplication operation Q=kG can be decomposed into basic operations such as point addition, doubling point, and modular multiplication. These basic operations are all based on the finite field F p on the basis of mathematics. [0003] Finite field F p The elliptic curve equation on can exist in many forms, among which the typical elliptic curve equation has the shape of y 2 =x 3 +ax+b(...

AI Technical Summary

Problems solved by technology

[0032] Based on this, it is necessary to provide a digital signature method and device for the problem that it is difficult to guarantee the privacy of the operation when the cryptographic operation in the public key cryptosystem is outsourced in the existing technology

Images