Encryption and decryption method and device for software password module account

Abstract

The embodiment of the invention provides a method and a device for encrypting and decrypting a software password module account. The encryption method comprises the steps of receiving an encryption instruction to generate a first random number, and determining coordinates of a first point based on the first random number and coordinates of a base point on an elliptic curve; determining coordinates of a second point based on the first random number and the coordinates of the P point; generating a key based on the coordinate of the second point to encrypt a target file in a software password module to generate a first ciphertext, and encrypting the coordinate of the second point and the target file based on a Hash algorithm to generate a second ciphertext; and generating a target ciphertext based on the coordinate of the first point, the first ciphertext and the second ciphertext. Wherein the coordinates of the P point are generated by the far-end collaborative server based on a randomly generated second private key fragment, the coordinates of the base point and the coordinates of the P1 point; the coordinates of the P1 point are generated by the local working platform on the basis of the coordinates of the base point and a first private key fragment generated on the basis of an unlocking password input by a user. The embodiment of the invention can give consideration to both efficiency and safety.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and device for encrypting and decrypting account numbers of a software cryptographic module. Background technique [0002] A software cryptographic module refers to a collection of cryptographic capabilities in a software form with clear boundaries. Cryptographic capabilities include cryptographic algorithms and cryptographic protocols. Cryptographic algorithms include symmetric algorithms, asymmetric algorithms, and hash algorithms. Cryptographic protocols include TLS protocol, SSL protocol, TLCP protocol, etc. The manifestation form of the software cryptographic module can be a library or a process. Regardless of the form, there is a problem of safe storage of the key and the problem of unlocking and using it. [0003] The existing safe storage and unlocking methods of keys mainly include white-box cryptography and collaboration technology. Among them,...

AI Technical Summary

Problems solved by technology

[0004] However, whether it is white-box cryptography or collaborative technology, the technical implementation is more complicated, the operation efficiency is low, and it is not suitable for a large number of keys.

In addition, in some applications, there may be a large number of keys. If each key needs to be processed collaboratively, more communication overhead and computing overhead will be required.

Images