Implicit certificate key generation method based on sm2 digital signature

Abstract

The invention discloses an implicit certificate key generation method based on SM2 digital signature, which mainly solves the problem that the user identity cannot be corresponding to the user public key in the public key cryptosystem in the prior art. The scheme is: set system parameters and initialize according to the standard cryptographic algorithm SM2; the certificate authority CA generates a key pair and uses the public key P CA Send to the user usr who applies for the certificate; the user who applies for the certificate generates a temporary key pair and identifies his identity ID A and the temporary public key X to the certificate authority CA; the CA generates the implicit certificate cert and signature s, and sends the cert and s to the user who applies for the certificate; the user generates the complete public key U and signs the complete public key U and s to verify and obtain a complete public-private key pair (u, U). The invention conforms to the national secret SM2 signature algorithm standard, has high operation efficiency, short bandwidth overhead, reduces the risk of a middleman replacing a public key, and can be used in an Internet of Things environment with limited resources.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to an implicit certificate key generation method, which can be used in an Internet of Things environment with limited resources, unifies the relationship between user identity and user public key, and realizes public key authentication. Background technique [0002] In the public key cryptography system, a user has two keys, public key and private key. Among them, the public key is open to anyone. Anyone who obtains the public key can use the public key to encrypt the message. The encrypted ciphertext can then be sent to the recipient through an open channel. Only the recipient who has the private key corresponding to the public key can correctly decrypt the ciphertext and recover the plaintext information. Typical public key encryption systems include RSA system, ELGamal system, and Gramer-Shoup system with high security. [0003] A key problem with this ...

AI Technical Summary

Problems solved by technology

But the problem with IBC itself is that although the identity is a meaningful string, if the identity information is entered incorrectly during encryption, it may also cause the receiver to fail to decrypt

However, the ECQV implicit certificate protocol has a certificate misbinding attack, and in terms of computing speed, it cannot accelerate the generation of user public keys in the ECQV implicit certificate protocol by precomputing and storing data operations.

Images