An sm2 homomorphic signature method based on sotp technology to multiply and encrypt private keys

Abstract

The invention discloses an SM2 homomorphic signature method based on SOTP technology for multiplying and encrypting a private key. The user's private key is encrypted based on modulo multiplication and then stored in the client, and the client can periodically update the private key by modulo encryption. Private key ciphertext, you do not need to decrypt the private key ciphertext when signing, you can directly use the ciphertext private key for signature; when the client performs the signature operation, the latest signature private key ciphertext is used for the signature operation. When verifying the signature, the signature verification service center receives the user uid, the timestamp T when the ciphertext of the signature private key is generated, the public key certificate, the signature value, and the signature data. Use the SOTP algorithm to recover the random number u used in the modulo multiplication encryption of the corresponding user's private key, use the random number and the original public key to multiply the point calculation to obtain the signature verification public key, and use the signature verification public key to verify whether the signature is legal. In the present invention, the private key protection can be substantially integrated with simple memory-based protection measures such as passwords, so as to enhance the ability to resist attacks such as device embezzlement, and has good portability.

Description

technical field [0001] The invention belongs to the fields of information security and data business, and in particular, the invention relates to an SM2 homomorphic signature method based on SOTP technology for multiplying and encrypting a private key. Background technique [0002] Existing SM2 private key protection methods: [0003] Instead of storing the original text of the signature private key, store the mixed result of the private key and pre-generated random numbers, and use the stored private key modulo multiplication result to generate the signature. For example, the invention patent with publication number CN201810133887.X discloses a method for implementing SM2 white-box ciphers. The patent proposes a scheme for encrypted storage of private keys, but does not solve the problem of preventing signature forgery after the stored ciphertext private key is stolen. . [0004] Analysis of existing technical solutions: [0005] The existing SM2 private key protection s...

AI Technical Summary

Problems solved by technology

[0006] Existing problem 1: The standard SM2 signature process steps and signature verification steps have been changed, which is incompatible with the SM2 standard algorithm

[0007] Problem 2: A third-party attacker has obtained the intermediate result of the stored private key, and can generate any legal signature by using the signature process in the scheme

Images