Interactive sm2 signature method, system and terminal for hiding private key

Abstract

The invention relates to the field of security technology. Specifically, it relates to an interactive SM2 signature method, system and terminal for hiding private keys, including an initialization part and a main body part. In the initialization part, the first communicating party generates a private key d A , based on the private key d A Generate four sub-private keys, and generate two sub-base points based on the base point G, and then send two of the four sub-private keys and one of the two sub-base points to the second communication party, and delete the data after the second communication party receives the data locally stored private key d A . In the main part, the first communicating party generates the first part of the signature according to the locally stored sub-base point, and sends it to the second communicating party; the second communicating party generates the second, third, and fourth part of the signature according to the locally stored sub-private key and sub-base point, Send to the first communication party; the first communication party generates a complete signature based on the data sent by the second communication party and the data stored locally. Using the present invention, the core data private key d can be made A It is only generated and mastered by the first communication party who is in charge of the private key.

Description

technical field [0001] The invention relates to the field of security technology, in particular to a signature method, system and terminal of an interactive SM2 algorithm that hides a private key. Background technique [0002] At present, digital signature and encryption and decryption technologies based on public key cryptography have been widely used in e-commerce, identity authentication and other applications, and have become an important tool to ensure information security, and the security and use of private keys are the basis for ensuring the security of these applications . [0003] In general, complete key information needs to be invoked when running a cryptographic algorithm, so the key needs to be stored directly in memory. On less protected endpoints, this increases the risk of key loss. For example, the loss of the mobile phone, the eavesdropping of the algorithm operation process, etc. will lead to the loss of the key. In order to improve the security of the...

AI Technical Summary

Problems solved by technology

[0005] However, in the above technical solution, the first communication party and the second communication party have the same amount of information, the private key is generated through negotiation between the two parties, and the party responsible for the private key does not fully own the private key, which is not reflected in the electronic signature Sovereignty of the party responsible for issuing the private key to the private key

Images