SM9 private key generation and use method and system

Abstract

The invention relates to an SM9 private key generation and use method, which comprises the following steps: when a corresponding SM9 signature private key is generated for a user identifier IDA, enabling a private key generator to generate a random byte string, and combine the random byte string into the IDA to obtain an IDAE; calculating t1 = (H1 (IDAE | | hid, n) + s) mod n, wherein n is the order of the SM9 bilinear mapping group, and hid is a private key generation function identifier; if t1 is equal to 0, regenerating a random byte string, merging to obtain an IDAE, and calculating t1 = (H1 (IDAE | hid, n) + s) mod n until t1 is not equal to 0; then, calculating t2 = s (t1)-1 mod n, wherein dA = [t2] P1, s is a main private key, and P1 is a generator of the group G1; and enabling the password component to perform digital signature on the message by using the SM9 private key dA generated by the method, and verify the digital signature of the message by using the IDAE combined with the random byte string.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a method and system for generating and using an SM9 private key. Background technique [0002] SM9 is an identification cryptographic algorithm based on bilinear mapping (pairing operation) promulgated by the State Cryptography Administration, where the bilinear mapping (pairing operation) is: [0003] e:G 1 ×G 2 →G T , where G 1 , G 2 is the additive cyclic group, G T is a multiplicative cyclic group, G 1 , G 2 , G T The order of is a prime number n (Note: In the SM9 specification, G 1 , G 2 , G T The order used is a capital letter N, and this patent application uses a lowercase n), that is, if P, Q, and R are respectively G 1 , G 2 element in , then e(P, Q) is G T elements in , and: [0004] e(P+R,Q)=e(P,Q)e(R,Q), [0005] e(P, Q+R)=e(P, Q)e(P, R), [0006] e(aP,bQ)=e(P,Q) ab . [0007] Based on the SM9 cryptographic algorithm, digital signature,...

AI Technical Summary

Problems solved by technology

[0013] It should be pointed out that the generation of the identification private key used for data decryption will also have the above problems that the user identification private key cannot be generated, and the resulting master private key or master key is accidentally leaked, but the harm is less than that for Signature private key, because at this time, even if the malicious person can generate his desired identification private key, he may not be able to obtain the encrypted data, therefore, he will not be able to decrypt the plaintext data, and even if the malicious person obtains the encrypted , and decrypt the data by generating the corresponding identification private key, which only causes information leakage, but does not appear forged signed orders, contracts, etc., and will not cause property losses or financial disputes

Images