A threshold signature method based on sm2 signature algorithm

Abstract

The invention discloses a threshold signature method based on the SM2 signature algorithm, including a system establishment stage, a signature stage and a signature verification stage, wherein: in the system establishment stage, a plurality of participating users jointly generate a DSA key pair (x, y= g x ), where y is a public value, and x is shared between users; in the signature generation stage, the DSA signature algorithm is used, and the random number k in the DSA signature is jointly generated by n users, and then jointly calculated by the nature of homomorphic encryption Get the encrypted value of the DSA signature, and finally decrypt the value to generate the signature of the message digest. The invention proposes a new threshold signature method based on the sm2 algorithm. In the method, the total member number n only needs to be greater than or equal to t+1, and the intermediate results of each step output by the user can be verified. Therefore, the threshold signature method proposed by Shang Ming et al. proposes a threshold signature scheme that is more flexible and has a wider application range.

Description

technical field [0001] The invention relates to a threshold signature method based on SM2 signature algorithm. Background technique [0002] The State Cryptography Administration released the SM2 elliptic curve public key cryptography algorithm on December 17, 2010. The SM2 algorithm is designed to ensure the security of various information systems, and is of great significance to the construction of commercial encryption products and information security systems in my country. Among them, SM2 elliptic curve public key cryptographic algorithm includes digital signature algorithm, key exchange protocol and public key encryption algorithm. [0003] In common signature algorithms, the private key is only held by one user. If the user's private key is stolen by an attacker, the attacker can forge the signature. In order to avoid this risk, Desmedt et al. proposed the idea of ​​threshold signature. In threshold signature, the private key is shared by a group consisting of n u...

AI Technical Summary

Problems solved by technology

However, this algorithm has the following limitations: (1) The total number of group members n must be at least greater than or equal to 2t+1

Therefore, it is not suitable for blockchain signature scenarios such as (2, 3), (2, 2)

(2) The validity of the signature given by each user in the group cannot be verified, and can only be verified by the final result

If the signature result is incorrect, the dishonest user cannot be identified

Images