A Cryptographic Reverse Firewall Applicable to Digital Signature

Abstract

The invention discloses a cryptographic reverse firewall method suitable for digital signatures, and belongs to the technical field of information security. This book first sets up a transparent and credible password reverse firewall on the signer and sets relevant system parameters; when the password reverse firewall receives the parameters, it resets some of the parameters and then forwards them to the signer; the signer based on the parameters received Sign the message to obtain the signature result and pass it to the password reverse firewall of the signer, and the password reverse firewall resets part of the sub-signatures in the signature result and then passes it to the verifier; the verifier verifies the received signature, Verify the legal signature of the message, if the verification is passed, output "accept", otherwise output "reject". The setting of the password reverse firewall of the present invention meets the three basic requirements of the password reverse firewall, achieves transparency and credibility, prevents leakage, improves user security, and especially protects internal attackers from attacking behavior.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a cryptographic reverse firewall method suitable for digital signatures. Background technique [0002] The password reverse firewall technology appeared after the Snowden Prism incident in 2014. It is aimed at monitoring internal attackers and under the control of security software backdoors, how to ensure that the information transmitted by users is not leaked. It is a new technology that assumes that the computer used by the user is compromised, but how to ensure that the information he transmits will not be leaked. The fundamental difference is that the attacks considered before are all external adversaries, while the cryptographic reverse firewall technology mainly solves internal problems. Because many facts in real life have proved that various encryption software and other security-related things have backdoors, and the existence of internal attackers is cert...

AI Technical Summary

Problems solved by technology

[0010] Although the password reverse firewall is more convenient and simpler than the previous technology, and it does not need to analyze the internal algorithm to experiment with the internal random number, but the password reverse firewall has certain limitations, and its requirements for re-randomization are relatively high

Because the requirement of re-randomization exists, and most digital signatures (such as Schnorr signature, DSS signature, Hess signature and some famous signatures) have a hash function in the algorithm implementation, and the hash function is irreversible, which means that the password Reverse firewall technology is difficult to implement on most digital signatures

Images