Two-party distributed SM9 digital signature generation method and system

Abstract

The invention discloses a two-party distributed SM9 digital signature generation method and a two-party distributed SM9 digital signature generation system. In the method, a KGC generates a corresponding private key for two communication parties A and B participating in an SM9 digital signature, and the party A sends a signing request to the party B after a signing key is received. The party B selects random numbers k1, k2 which belong to [1, q-1], computes [mu]1=g1<k1> and [mu]2=g<k2>, and returns [mu]1 and [mu]2 to the party A. At the moment, the party A randomly selects k3 and k4, computesa first part h of the signature, and returns h'=k4-h(modq) to the party B. The party B computes s1 and s2 by using the own private key and sends s1 and s2 to the party A. After receiving s1 and s2, the party A uses the own private key to compute a second part S of the signature, and after verification of the signature is passed, the party A publishes the complete SM9 digital signature (h, S). Themethod and the system provided by the invention have the advantages of being high in security and execution efficiency and prone to verify; during a digital signature generation process, the SM9 digital signature can only be generated in a distributed manner under the condition that the two communication parties participate in jointly, the signature sub-key can be effectively prevented from beingstolen by external attackers and counterfeiting of internal participators can be effectively avoided, and generation security and fairness of the SM9 digital signature the two parties participate in are improved.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a two-party distributed SM9 digital signature generation method and system based on two parties jointly generating SM9 digital signatures. Background technique [0002] Digital signature is an important cryptographic scheme, which generates message digital signature through some cryptographic operation, instead of writing signature or seal. Digital signature is an important tool for authentication and is mainly used to prevent attackers from actively attacking the system, such as masquerading and spoofing. Digital signatures can verify the identity of the message sender, prevent the sender from denying and prevent the message receiver from forging, and can also verify the integrity of the message and resist the forgery attack of the third party. Digital signature is mainly used to identify the identity of the signer and the legitimacy of the information. It is curre...

AI Technical Summary

Problems solved by technology

[0003] In the digital signature process, the leakage of the signature key means the loss of the security of the signature scheme

Images