Signature method, device, mobile terminal and storage medium resistant to injection attack

Abstract

The invention discloses a signature method for resisting injection attack. In order to solve the problem that the random number encounters the injection error attack in the digital signature process,one bit of the random number is modified, so that the method of judging whether the point of the elliptic curve is on the elliptic curve can not be used to determine whether the digital signature issubjected to the injection error attack in the digital signature process. The method comprises: calculating a digital signature value of a message to be signed according to a first parameter; constructing a temporary variable according to the digital signature value and the first parameter; determining a first coordinate point according to the temporary variable and the elliptic curve base point coordinates; determining a second coordinate point according to the elliptic curve scalar multiplication operation and the elliptic curve base point coordinates; if it is judged that the first coordinate point coincides with the second coordinate point, the digital signature value is output. The invention also discloses a signature device resistant to injection attack, a mobile terminal and a computer-readable storage medium.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a signature method, device, mobile terminal and computer-readable storage medium for resisting injection attacks. Background technique [0002] Digital signature is a basic information security technology, which plays an important role in identity authentication, data integrity, non-repudiation and anonymity, especially in key distribution and authentication in network security communication. . The so-called digital signature refers to adding some data to the original data unit or performing cryptographic transformation on the data unit. However, in the prior art, during the digital signature process, an attacker may inject an error attack into the cryptographic chip device, causing the cryptographic device to produce an incorrect result, and then analyze the incorrect result to obtain a key, thereby destroying the security of the data. [0003] Among them, the inj...

AI Technical Summary

Problems solved by technology

[0005] The embodiment of the present invention provides a signature method resistant to injection attacks, which is used to solve the problem of how to judge whether the random number used for digital signature is attacked in the prior art

Images