Method for implementing SM2 white-box digital signature based on residue number system

Abstract

The invention provides a method for implementing an SM2 white-box digital signature based on a residue number system. The method carries out research in allusion to problems that a key is unsafe in operation in an incredible environment and that a malicious attacker can acquire the key of the system through a means of white-box attacks. Splitting of a big number is realized through using the residue number system, so that the size of a key table is reduced; an intermediate result is ensured to be invisible to the attacker through using scrambling and confounding; and the uncertainty of a terminal key operation relation is ensured through using a random factor of the cloud, the safety of a signature private key in the terminal signature operation process is realized, and verification can be performed by using a standard SM2 signature verification algorithm at the same time. The method provided by the invention is small in required storage space, high in calculation efficiency, good in safety and high in practicability.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for realizing an SM2 white-box digital signature based on a remainder system. Background technique [0002] In the existing software encryption algorithm, the key is directly in the memory of the computing platform, and the attacker can steal the key through malicious software, etc., which cannot deal with the existing white box attack method; the existing hardware encryption algorithm, It can better guarantee the security of key calculation, but the relative use cost is relatively high, and the versatility is poor, and it cannot be used for some application scenarios with relatively low security requirements; at the same time, some research institutions have proposed cloud-based Part of the key and the software encryption algorithm of the key decentralized storage strategy, but the cloud plus terminal strategy cannot resist the leakage of the local private ...

AI Technical Summary

Problems solved by technology

[0002] In the existing software encryption algorithm, the key is directly in the memory of the computing platform, and the attacker can steal the key through malicious software, etc., which cannot deal with the existing white box attack method; the existing hardware encryption algorithm, It can better guarantee the security of key calculation, but the relative use cost is relatively high, and the versatility is poor, and it cannot be used for some application scenarios with relatively low security requirements; at the same time, some research institutions have proposed cloud-based Part of the key and the software encryption algorithm of the key decentralized storage strategy, but the cloud plus terminal strategy cannot resist the leakage of the local private key, and also stores the authentication problem between the cloud and the terminal. The key decentralized storage strategy must be synthesized when performing key calculations The key, and the complete plaintext of the key also exists in the memory

Images