Method for establishing channel in TLS1_3 protocol based on national cryptographic algorithm

Abstract

The invention discloses a method for establishing a channel in a TLS1_3 protocol based on a national cryptographic algorithm. The method comprises a key exchange stage, a server parameter stage and anidentity authentication stage. In the key exchange phase, an SM2 key exchange algorithm is introduced to negotiate a shared key, and compared with international algorithms such as ECDH and ECDSA, a safer mechanism is adopted; in the identity authentication stage, compared with an RSA algorithm, the SM2 algorithm has the advantages that the encryption strength is similar to the safety performanceof a 3072-bit RSA algorithm when the key length of the SM2 algorithm is 256 bits, two message words are used in each round of a compression function of the SM3 algorithm, and the SM3 algorithm has higher word completeness than an existing SHA256 algorithm. In a symmetric encryption algorithm, an SM4 algorithm is introduced, a 32-round nonlinear iterative structure is adopted, the number of roundsof calculation is far larger than that of an AES algorithm, and safety is higher. According to the method, by improving the encryption algorithm serving as a data transmission safety core, secret keyleakage in the transmission process is avoided, and the safety of establishing a TLS1_3 channel is improved to a great extent.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for establishing a channel in the TLS1_3 protocol based on a national secret algorithm. Background technique [0002] Transport Layer Security (TLS) is a widely used security protocol on the Internet, used to provide confidentiality and data integrity between two communication applications, and is the standard for transport layer security. In the course of many years of application, attacks against the protocol continue to appear. Therefore, improving protocol security is of great significance to the popularization and development of the protocol, and the encryption algorithm is the core of data transmission security. [0003] In the existing technology, a variety of different encryption algorithms have emerged based on different encryption and decryption ideas. Each set of encryption algorithms has its own unique processing methods, and they are often incompat...

AI Technical Summary

Problems solved by technology

[0005] However, since the above national secret algorithm is different from the existing algorithm used in the TLS1_3 protocol, such as the key length is different, and the iteration structure is different, the national secret algorithm cannot be applied to the TLS1_3 protocol according to the existing method

Images