Mimicry security password calculation model

Abstract

The invention provides a mimicry security password calculation model. The model is composed of two independent cryptographic calculation assemblies E1 and E2, and each assembly comprises an M1 cryptographic algorithm module, an M2 result verification module and an M3 interface. The E1 and the E2 have the same function but are different from each other; M1 of the two parties uses an asymmetric cryptographic algorithm, a collaborative cryptographic calculation mechanism is provided, and each calculation is randomized; the calculation results of M1 of the two parties are mutually input into M2 for multi-mode verification and then output to M3; and the M3 of the two parties receives calling and outputs a result. During password calculation, firstly, calling is synchronously initiated to M3 of two parties to start calculation; secondly, the M1 of the two parties performs cooperative calculation and obtains calculation results respectively, and the calculation results are mutually input to respective M2; thirdly, the M2 of the two parties performs multi-mode verification on the two paths of input calculation results, and the verified output value and the calculation result of each M1 are output to the M3 after being subjected to exclusive or operation; and finally, the M3 of the two parties outputs a final calculation result. The composition and the working mechanism of the whole model accord with the mimicry safety theory.

Description

technical field [0001] The present invention relates to the field of cryptographic calculations, especially the field of cryptographic calculations that can resist attacks, including but not limited to this field. Background technique [0002] Cryptographic calculation is a calculation that uses cryptographic algorithms to achieve a certain security goal. Basic cryptographic calculations include encryption, decryption, signature, signature verification, and integrity check code. In an information system, at least a key, an algorithm module, and an input and output interface are required to complete cryptographic calculations. In order to ensure the security of cryptographic calculations, the usual protection method is to construct a physically independent and isolated security environment, such as U-shield, TEE, etc., and encapsulate the key, algorithm, and interface into the security environment, and the security environment receives call input , output the password calcul...

AI Technical Summary

Problems solved by technology

However, in some application scenarios such as cloud computing, due to computing resource virtualization and dynamic configuration requirements, it is impossible to provide a fixed, independent and isolated hardware environment, resulting in the security of cryptographic calculations in such application scenarios cannot be guaranteed.

Images