Asymmetric white-box cipher encryption method and device and equipment

Abstract

The application discloses an encryption method and device and facility of asymmetric white box cryptography. The method comprises the following steps: receiving an encrypted message and an encryption serial number from a message sending terminal; sending the correspondingly stored encrypted message and encryption serial number to a certificate authority in response to a request of acquiring the message content so that the certificate authority performs certification on an identity of a message receiving end and searches a message grouping scheme and an encryption public key which are corresponding to the received encryption serial number after the certification is passed; decrypting the encrypted message according to the message grouping scheme and an encryption private key corresponding to the corresponding encryption public key of each group; and receiving the decrypted message content from the certificate authority. By use of the encryption method disclosed by the application, the information security still can be realized when an attacker acquires the control to the running and storing environment of the encrypted data.

Description

technical field [0001] The present disclosure generally relates to the field of computer technology, specifically to the field of information processing security, and in particular to an asymmetric white-box encryption method and device. Background technique [0002] In data transmission and storage, data encryption is usually required for information security considerations. The current encryption mainly assumes that the attacker of the data cannot access the environment where the encryption operates, nor can he control the environment where the encrypted data is stored, nor can he access the encryption algorithm and key. That is, the encryption process and the storage of encrypted data exist as a "black box" and cannot be known by attackers. [0003] However, in fact, in some cases, data attackers can gain access to the encrypted operating environment, and even gain control over data encryption and encrypted data storage environments. In this way, it is easy for them to ...

AI Technical Summary

Problems solved by technology

The current encryption mainly assumes that the attacker of the data cannot access the environment where the encryption operates, nor can he control the environment where the encrypted data is stored, nor can he access the encryption algorithm and key

That is, the encryption process and the storage of encrypted data exist as a "black box", which cannot be known by the attacker

[0003] However, in fact, in some cases, data attackers can gain access to the encrypted operating environment, and even gain control over data encryption and encrypted data storage environments.

In this way, it is easy for them to infer the encryption algorithm and key through data encryption, some intermediate data in the encrypted data storage environment, environmental data, etc., in order to attack the data.

Images