Signature authentication system and method based on SM2 encryption and decryption algorithm

Abstract

The invention relates to a signature authentication system and a signature authentication method based on an SM2 encryption and decryption algorithm. The system comprises a software module and a hardware module; the hardware module comprises an operation module, a register and a random number generator; the random number generator generates a random number, a symmetric key, a public key and a private key of a sender and the public key and the private key of a receiver applied to the algorithm; the operation module is used for operating SM2, SM3 and SM4 algorithms during encryption and decryption process; the software module is used for achieving a signature authentication function; and the register is used for being accessed by the software module so as to schedule the operation module. According to the system and the method provided by the invention, the random number generated during a signature authentication process is generated by the random number generator, so that data security is greatly improved; the operation part is implemented by the hardware module, the software module achieves the signature authentication function, and thus the method is greatly improved in operation speed by cooperation of hardware and software compared with the method only using the software; compared with inoperability of the method only using the hardware, the method has stronger controllability, programmability, transportability and compatibility.

Description

technical field [0001] The invention relates to the technical field of cyberspace security, in particular to a signature verification system and method based on the SM2 encryption and decryption algorithm. Background technique [0002] As network security issues become more and more serious and their impact is increasing, digital signature verification emerges at the historic moment; digital signature can realize the reliability of user identity; realize the integrity of information; ensure the process of data storage, transmission and processing Free from any unauthorized or unexpected modification, insertion, deletion, retransmission, etc., so as to realize the authenticity, validity and consistency of data; realize non-repudiation, and ensure that the sender of the information cannot deny it through digital signature The information that has been sent cannot deny one's own operation behavior. [0003] The SM2 algorithm is an elliptic curve public key cryptographic algori...

AI Technical Summary

Problems solved by technology

But the disadvantages are: (1) OpenSSL has been exposed to serious security vulnerabilities, hackers can use this vulnerability to directly launch a "Heartbleed" (Heartbleed) attack on personal computers; a large number of software on Windows use the vulnerable OpenSSL code library, which may be exploited Hackers attack and grab the memory data on the user's computer, which is less secure

(2) Only using software method to realize SM2 signature verification, its calculation speed is relatively slow, which cannot meet the needs of users

[0005] However, if the signature verification is simply implemented through hardware, its inoperability and poor compatibility also determine that it cannot keep up with the pace of the diversified era

Images