Implicit certificate public key processing method and system based on post-fusion quantum algorithm, and user side

Abstract

The invention provides a post-quantum algorithm fused implicit certificate public key processing method and system and a user side, and relates to the technical field of password application. The method comprises the following steps: a user side obtains a national secret user declaration public key of a target user from an institution side of a trusted institution, the user side generates a national secret user public and private key pair of the target user according to the national secret user declaration public key, and the user side generates a post-quantum user public and private key pair of the target user; the user side obtains a post-quantum user declaration public key from the institution side of the trusted institution according to a national secret user public key in the national secret user public and private key pair and a post-quantum user public key in the post-quantum user public and private key pair, the user side splices the national secret user declaration public key and the post-quantum user declaration public key to obtain a mixed declaration public key of a target user, and the mixed declaration public key is used for sending the mixed declaration public key to the user side of the trusted institution. A mixed declaration public key is disclosed to a public key using end; the mixed declaration public key is used for performing encryption and decryption processing or signature verification processing on the implicit certificate of the target user, so that the implicit certificate public key can resist the attack of the quantum algorithm.

Description

Technical Field

[0001] The present invention relates to the field of cryptographic application technology, and in particular to an implicit certificate public key processing method, system and user terminal integrating a post-quantum algorithm. Background Art

[0002] Implicit certificate is a new digital certificate scheme for the Public Key Infrastructure (PKI) system. It is based on the elliptic curve cryptography algorithm and does not include the signatures of the certificate signing authority and the certificate issuing authority during the authentication process. The verifier needs to calculate the public key of the implicit certificate owner based on the data and perform cryptographic operations using the public key.

[0003] However, the existing scheme is based on the implicit certificate public key generated by the elliptic curve cryptography algorithm, and the quantum algorithm Shor's algorithm can crack difficult problems such as integer factorization and discrete logarithm. Therefore, the implicit certificate verification method based on traditional asymmetric cryptography algorithm faces huge threats. Summary of the invention

[0004] The purpose of the present invention is to provide an implicit certificate public key processing method, system and user terminal that integrate post-quantum algorithms to address the deficiencies in the above-mentioned prior art, so as to mix post-quantum cryptography with the traditional generation of implicit certificate public keys based on the elliptic curve cryptography algorithm SM2, so that the generated implicit certificate public key meets the requirements of the existing security system and can resist the attack of quantum algorithms.

[0005] To achieve the above purpose, the technical solution adopted in the embodiment of the present application is as follows:

[0006] In a first aspect, an embodiment of the present application provides an implicit certificate public key processing method integrating a post-quantum algorithm, which is applied to an implicit certificate public key system, wherein the implicit certificate public key system includes: an institution end of a trust institution, a public key use end, and a user end, and the method includes:

[0007] The user end obtains the national secret user declaration public key of the target user from the institution end of the trust institution;

[0008] The user terminal generates a national secret user public-private key pair of the target user according to the national secret user declared public key;

[0009] The user terminal generates a post-quantum user public-private key pair for the target user;

[0010] The user end obtains the post-quantum user declaration public key from the institution end of the trust institution according to the national secret user public key in the national secret user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair;

[0011] The user end concatenates the national secret user declared public key and the post-quantum user declared public key to obtain the hybrid declared public key of the target user, and discloses the hybrid declared public key to the public key user end; the hybrid declared public key is used to encrypt and decrypt or verify the signature of the target user's implicit certificate.

[0012] In an optional implementation manner, the user terminal obtains the national secret user declaration public key of the target user from the trust institution, including:

[0013] The user terminal uses a preset national encryption algorithm to generate a temporary public and private key pair of the target user;

[0014] The user end obtains the national secret user declaration public key and the national secret user private key component from the institution end of the trust institution according to the temporary user public key in the temporary user public-private key pair;

[0015] The user terminal generates the target user's national secret user public-private key pair according to the national secret user declaration public key, including:

[0016] The user terminal generates the national secret user private key of the target user according to the national secret user private key component and the temporary user private key in the temporary user public-private key pair;

[0017] The user terminal generates the national secret user public key of the target user according to the national secret user declared public key and the pre-acquired national secret master public key of the trusted institution.

[0018] In an optional implementation manner, the user terminal generates a post-quantum user public-private key pair of the target user, including:

[0019] The user terminal uses a preset post-quantum algorithm to generate a post-quantum user public-private key pair for the target user.

[0020] In an optional implementation manner, the user terminal obtains the post-quantum user declaration public key from the trust institution according to the national secret user public key in the national secret user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair, including:

[0021] The user terminal sends the national secret user public key and the post-quantum user public key to the institution terminal of the trust institution;

[0022] The institutional end of the trust institution generates and discloses the post-quantum user declaration public key to the user end based on the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key of the trust institution.

[0023] In an optional implementation manner, the institution end of the trust institution generates and discloses the post-quantum user declaration public key to the user end according to the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key of the trust institution, including:

[0024] The institution end of the trust institution generates post-quantum public key signature data according to the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key of the trust institution;

[0025] The institution end of the trust institution concatenates the post-quantum public key signature data and the post-quantum user public key to generate and disclose the post-quantum user declaration public key to the user end.

[0026] In an optional embodiment, the method further comprises:

[0027] The public key user unseals the hybrid declared public key to obtain the national cryptographic user declared public key and the post-quantum user declared public key;

[0028] The public key user terminal obtains the national secret user public key and the post-quantum user public key respectively according to the national secret user declared public key and the post-quantum user declared public key;

[0029] The public key user end encrypts and verifies the implicit certificate of the target user based on the national secret user public key and the post-quantum user public key.

[0030] In an optional implementation manner, the public key user terminal obtains the national secret user public key and the post-quantum user public key respectively according to the national secret user declared public key and the post-quantum user declared public key, including:

[0031] The public key user calculates the national secret user public key according to the national secret user's declared public key and the national secret master public key of the trusted institution;

[0032] The public key user end parses the post-quantum user declared public key to obtain the post-quantum user public key and corresponding post-quantum public key signature data.

[0033] In an optional implementation, the public key user parses the post-quantum user declared public key to obtain the post-quantum user public key and the corresponding post-quantum public key signature data: including:

[0034] The public key user verifies the post-quantum public key signature data according to the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key.

[0035] In the second aspect, an embodiment of the present application also provides an implicit certificate public key system, which includes: an institutional end of a trusted institution, a public key usage end, and a user end. The implicit certificate public key system is used to execute the steps of the implicit certificate public key processing method that integrates the post-quantum algorithm as described in any of the first aspects.

[0036] In the third aspect, an embodiment of the present application also provides a user terminal, comprising: a processor, a storage medium and a bus, wherein the storage medium stores program instructions executable by the processor. When the user terminal is running, the processor communicates with the storage medium through the bus, and the processor executes the steps of the implicit certificate public key processing method integrating the post-quantum algorithm as described in any one of the first aspects.

[0037] The beneficial effects of this application are:

[0038] An embodiment of the present application provides an implicit certificate public key processing method, system and user end that integrates a post-quantum algorithm, the method comprising: the user end obtains the national secret user declared public key of the target user from the institutional end of the trusted institution, the user end generates the national secret user public-private key pair of the target user based on the national secret user declared public key, the user end generates the post-quantum user public-private key pair of the target user, the user end obtains the post-quantum user declared public key from the institutional end of the trusted institution based on the national secret user public key in the national secret user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair, the user end concatenates the national secret user declared public key and the post-quantum user declared public key to obtain a mixed declared public key of the target user, and discloses the mixed declared public key to the public key user end; the mixed declared public key is used to perform encryption and decryption processing or signature verification processing on the implicit certificate of the target user. The method of the present application uses a mixture of post-quantum cryptography on the basis of the traditional generation of implicit certificate public keys based on the elliptic curve cryptography algorithm SM2, so that the implicit certificate public keys generated by the present application meet the requirements of the existing security system and can resist the attacks of quantum algorithms, and realize the encryption and decryption processing or signature verification processing of the target user's implicit certificate through the hybrid declaration public key. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0040] Figure 1 One of the schematic diagrams of an implicit certificate public key processing method integrating a post-quantum algorithm provided in an embodiment of the present application;

[0041] Figure 2A second schematic diagram of an implicit certificate public key processing method integrating a post-quantum algorithm provided in an embodiment of the present application;

[0042] Figure 3 A third schematic diagram of an implicit certificate public key processing method integrating a post-quantum algorithm provided in an embodiment of the present application;

[0043] Figure 4 A fourth schematic diagram of an implicit certificate public key processing method integrating a post-quantum algorithm provided in an embodiment of the present application;

[0044] Figure 5 A fifth schematic diagram of an implicit certificate public key processing method integrating a post-quantum algorithm provided in an embodiment of the present application;

[0045] Figure 6 Schematic diagram 6 of an implicit certificate public key processing method integrating a post-quantum algorithm provided in an embodiment of the present application;

[0046] Figure 7 A schematic diagram of a method for generating an implicit certificate public key that integrates a post-quantum algorithm provided in an embodiment of the present application. DETAILED DESCRIPTION

[0047] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments.

[0048] Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the present application for which protection is sought, but merely represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0049] In the description of the present application, it should be noted that if the terms "upper", "lower", etc. appear, the orientation or position relationship indicated is based on the orientation or position relationship shown in the drawings, or is the orientation or position relationship in which the product of the application is usually placed when used. It is only for the convenience of describing the present application and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present application.

[0050] In addition, the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0051] It should be noted that, in the absence of conflict, the features in the embodiments of the present application may be combined with each other.

[0052] Elliptic Curve Qu-Vanstone Implicit Certificate (ECQV) is a certificate authentication mechanism based on elliptic curves. It does not include the signature of the certificate issuing authority and the verifier needs to calculate the public key of the implicit certificate owner based on the certificate data and perform cryptographic operations through the public key.

[0053] At present, the certificateless and implicit certificate public key generation scheme based on the elliptic curve cryptography algorithm SM2 includes: the institution first generates the institution's master public-private key pair, the user end generates a temporary user public-private key pair, and then the institution generates the user's declared public key and user private key components based on the user identification information, the user's temporary public key, and the institution's master public-private key pair. The user end generates the user's private key based on the temporary user private key and the user's private key component, and the user end calculates and generates the user's public key based on the user's declared public key and the institution's master public key. The user's public key is the public key without certificate and implicit certificate. This scheme binds the user public key generation with the institution's public key to achieve user-institution binding, thereby achieving an effect similar to that of a certificate. However, the quantum algorithm Shor's algorithm can crack problems such as integer decomposition and discrete logarithms. The implicit certificate public key generated based on the elliptic curve cryptography algorithm SM2 is vulnerable to attacks by quantum algorithms.

[0054] Post-quantum Cryptography (PQC) cryptographic algorithms can effectively resist attacks from quantum computing and meet the security requirements of the post-quantum era. However, post-quantum cryptography also has problems such as lack of effective security proof and inability to meet existing security evaluation standards. Therefore, this application provides an implicit certificate public key processing method that integrates post-quantum algorithms. Post-quantum cryptography is mixed with traditional methods of generating implicit certificate public keys based on the elliptic curve cryptography algorithm SM2, so that the implicit certificate public keys generated by this application meet the requirements of the existing security system and can resist attacks from quantum algorithms.

[0055] The embodiment of the present application also provides an implicit certificate public key system, which is used to execute the implicit certificate public key processing method that integrates the post-quantum algorithm provided in the embodiment of the present application, wherein the implicit certificate public key system includes: an institutional end of a trust institution, a public key usage end, and a user end, wherein; the user end is used to obtain the national secret user declared public key of the target user from the institutional end of the trust institution, generate the national secret user public-private key pair of the target user according to the national secret user declared public key, generate the post-quantum user public-private key pair of the target user, obtain the post-quantum user declared public key from the trust institution according to the national secret user public key in the national secret user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair, concatenate the national secret user declared public key and the post-quantum user declared public key to obtain a mixed declared public key of the target user, and disclose the mixed declared public key to the public key usage end; the mixed declared public key is used to encrypt and decrypt or perform signature verification on the implicit certificate of the target user.

[0056] The following is a detailed explanation of the implicit certificate public key processing method for integrating the post-quantum algorithm provided in the embodiment of the present application through specific examples in conjunction with the accompanying drawings. The method is applied to an implicit certificate public key system, which includes: an institution end of a trust institution, a public key use end, and a user end. Figure 1 One of the schematic diagrams of an implicit certificate public key processing method integrating a post-quantum algorithm provided in an embodiment of the present application; Figure 1 As shown, the method includes:

[0057] S101. The user end obtains the national secret user declaration public key of the target user from the institution end of the trust institution.

[0058] S102. The user terminal generates a national secret user public-private key pair of the target user according to the national secret user declared public key.

[0059] S103. The user terminal generates a post-quantum user public-private key pair for the target user.

[0060] S104. The user end obtains the post-quantum user declaration public key from the institution end of the trust institution based on the national secret user public key in the national secret user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair.

[0061] S105. The user end concatenates the national secret user declared public key and the post-quantum user declared public key to obtain the mixed declared public key of the target user, and discloses the mixed declared public key to the public key user.

[0062] The hybrid declaration public key is used to encrypt and decrypt or to verify the signature of the target user's implicit certificate.

[0063] In this embodiment, the generation process of the implicit certificate public key integrating the post-quantum algorithm includes multiple stages, namely the master key stage, the declaration key stage, and the public key usage stage.

[0064] In the master key stage, the institutional end of the trust institution generates the corresponding national secret master public-private key pair and post-quantum master public-private key pair respectively, and then discloses the national secret master public key in the national secret master public-private key pair and the post-quantum master public key in the post-quantum master public-private key pair. Specifically, the institutional end of the trust institution generates the national secret master public key of the trust institution based on the generated first random number and the national secret key generation algorithm in the preset national secret algorithm. The first random number is the national secret master private key. The national secret master public-private key pair of the trust institution includes: the national secret master public key P of the trust institution, and the first random number sk. The generated national secret master public key P is expressed as: P = [sk] G, where G is the base point of SM2. The institutional end of the trust institution generates the post-quantum master public key of the trust institution based on the generated second random number and the preset post-quantum algorithm. The post-quantum master public-private key pair of the trust institution includes: the post-quantum master public key P of the trust institution. PQC , and the second random number sk PQC .

[0065] In the key declaration phase, the user end obtains the target user’s national secret user declaration public key W from the trust institution. A , and according to the national secret user declaration public key W A , generate the target user's national secret user public-private key pair, the target user's national secret user public-private key pair includes: national secret user public key P A and the private key d for the national secret user A .

[0066] In the key declaration phase, the user end also generates a post-quantum user public-private key pair for the target user. The post-quantum user public-private key pair for the target user includes: the post-quantum user public key P APQC and the private key d for the national secret user APQC .

[0067] Optionally, the user end uses a preset post-quantum algorithm to generate a post-quantum user public-private key pair for the target user.

[0068] Specifically, the user end uses a post-quantum key generation algorithm in a preset post-quantum algorithm to generate a post-quantum user public and private key pair.

[0069] In the key declaration phase, the user sends the national secret user public key P to the trust institution. A and the post-quantum user public key P APQC , so that the institution end of the trust institution can use the national secret user public key P A and the post-quantum user public key P APQC , generate the post-quantum user declared public key W APQC , and returns the post-quantum user declared public key W to the user end APQC .

[0070] In the key declaration phase, the user declares the public key W obtained from the trusted institution. A and the post-quantum user declares the public key W APQC The hybrid declared public key W of the target user is obtained by concatenation, where the hybrid declared public key W is expressed as: W = W A ||W APQC , and disclose the hybrid declared public key to the public key user, so that during the public key usage phase, the public key user encrypts or verifies the implicit certificate of the target user according to the hybrid declared public key.

[0071] In addition, the generation process of the implicit certificate public key that integrates the post-quantum algorithm also includes a private key usage stage. The user end decrypts or signs the target user's implicit certificate based on the national secret user private key and the post-quantum user private key.

[0072] In summary, an embodiment of the present application provides an implicit certificate public key processing method integrating a post-quantum algorithm, which is applied to an implicit certificate public key system. The method includes: a user end obtains the national secret user declared public key of the target user from the institutional end of a trusted institution, the user end generates the national secret user public-private key pair of the target user based on the national secret user declared public key, the user end generates the post-quantum user public-private key pair of the target user, the user end obtains the post-quantum user declared public key from the institutional end of the trusted institution based on the national secret user public key in the national secret user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair, the user end concatenates the national secret user declared public key and the post-quantum user declared public key to obtain a mixed declared public key of the target user, and discloses the mixed declared public key to the public key user end; the mixed declared public key is used to perform encryption and decryption processing or signature verification processing on the target user's implicit certificate. The method of the present application uses a mixture of post-quantum cryptography on the basis of the traditional generation of implicit certificate public keys based on the elliptic curve cryptography algorithm SM2, so that the implicit certificate public keys generated by the present application meet the requirements of the existing security system and can resist the attacks of quantum algorithms, and realize the encryption and decryption processing or signature verification processing of the target user's implicit certificate through the hybrid declaration public key.

[0073] The embodiment of the present application also provides another possible implementation of the implicit certificate public key processing method integrating the post-quantum algorithm. Figure 2 A second schematic diagram of an implicit certificate public key processing method integrating a post-quantum algorithm provided in an embodiment of the present application is shown in FIG. Figure 2 As shown, the client obtains the target user's national secret user declaration public key from the trust institution, including:

[0074] S201. The user terminal uses a preset national encryption algorithm to generate a temporary public and private key pair for the target user.

[0075] S202. The user end obtains the national secret user declaration public key and the national secret user private key component from the institutional end of the trust institution based on the temporary user public key in the temporary user public-private key pair.

[0076] In this embodiment, in the master key stage, the user terminal uses the national secret key generation algorithm in the preset national secret algorithm to generate a temporary user public and private key pair (d' A ,U A ), where (d' A ,U A )=(Randd' A ,[d' A ]G), d' A is the temporary user private key of the target user, U A The temporary public key of the target user.

[0077] During the key declaration phase, the user sends a temporary user public key to the trusted institution, that is, sends a national secret user public key declaration request for the target user to the institution.

[0078] In the key declaration phase, the trust institution receives the temporary user public key sent by the user, generates a third random number, and then calculates the third random number w and the temporary user public key U. A , generate the national secret user declaration public key W A , where W A =U A +[w]G. And return to the user end the public key W declared by the trust institution for the target user A .

[0079] In addition, in the master key stage, the trust institution generates the national secret user public key parameter for the target user as follows: H A =H 256 (ENTL A ||ID A ||a||b||x G ||y G ||x P ||y P ), where H A Indicates the national secret user public key parameter of the target user generated by the trust institution, H 256 () indicates a digest function that outputs 256 bits, ID A Represents the identity of the target user A, x G ,y G Expressed as the coordinates of the base point, x P ,y P Represents the coordinates of the national secret master public key of the trusted institution.

[0080] During the key declaration phase, the institutional side of the trust organization generates user private key parameters for the target user based on the national secret user public key parameters for the target user and the national secret user declared public key.

[0081] Specifically, the trust institution generates the user private key parameters for the target user as follows:

[0082] λ=H 256 (x WA ||y WA ||H A )mod n

[0083] Where λ represents the user private key parameter of the target user generated by the trust institution, H 256 () represents a summary function that outputs 256 bits, x WA ,y WARepresents the coordinates of the national secret user declaration public key for the target user by the trust institution.

[0084] The institutional end of the trust institution generates and returns the national secret user private key component for the target user to the user end based on the user private key parameters for the target user, the first random number and the third random number.

[0085] Specifically, the user private key component for the target user is expressed as:

[0086] t A =w+λ·sk mod n

[0087] Among them, t A It represents the user private key component for the target user generated by the institution side of the trust institution, w represents the third random number, and sk represents the first random number.

[0088] Based on the above user end, according to the public key declared by the national secret user, the national secret user public and private key pair of the target user is generated, including:

[0089] S203. The user terminal generates the target user's national secret user private key according to the national secret user private key component and the temporary user private key in the temporary user public-private key pair.

[0090] S204. The user terminal generates the target user's national secret user public key based on the national secret user declared public key and the pre-acquired national secret master public key of the trusted institution.

[0091] Specifically, in the key declaration stage, the user end uses the national secret user private key component t A And the temporary user private key d' A , generate the target user's national secret user private key d A , the expression for generating the private key of the national secret user is: A =t A +d' A mod n.

[0092] The user also declares the public key W according to the national secret user A And the pre-obtained national secret master public key P of the trust institution, generate the national secret user public key P of the target user A .

[0093] Specifically, the user end uses the target user's ID A And the national secret master public key P, generate the national secret user public key parameter H A , and then according to the national secret user public key parameter H A And the national secret user declares the public key W A , generate the user private key parameter λ, and finally use the user private key parameter λ, the national secret master public key P of the trust institution, and the user's declared public key W A, generate the target user's national secret user public key P A , generate the target user's national secret user public key as: P A =W A +[λ]P.

[0094] Alternatively, the user terminal generates the target user's national secret user public key based on the national secret user private key, and the expression is: A =[d A ]G, among which, the national secret user public keys generated by the two methods can be compared to determine whether they are consistent. If they are consistent, the verification is successful.

[0095] In the method provided in the embodiment of the present application, the user end adopts a preset national secret algorithm to generate a temporary user public-private key pair for the target user. The user end obtains the national secret user declared public key and the national secret user private key component from the institutional end of the trusted institution based on the temporary user public key in the temporary user public-private key pair. The user end generates the national secret user private key of the target user based on the national secret user private key component and the temporary user private key in the temporary user public-private key pair. The user end generates the national secret user public key of the target user based on the national secret user declared public key and the national secret master public key of the trusted institution obtained in advance, so that the user end generates the national secret user public-private key pair for the target user based on the national secret user declared public key.

[0096] The embodiment of the present application also provides another possible implementation of the implicit certificate public key processing method integrating the post-quantum algorithm. Figure 3 The third schematic diagram of an implicit certificate public key processing method integrating a post-quantum algorithm provided in an embodiment of the present application is provided. Figure 4 A fourth schematic diagram of a method for processing an implicit certificate public key integrating a post-quantum algorithm provided in an embodiment of the present application, such as Figure 3 As shown, the user end obtains the post-quantum user declaration public key from the trust institution based on the national secret user public key in the national secret user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair, including:

[0097] S301. The user end sends the national secret user public key and the post-quantum user public key to the institution end of the trusted institution.

[0098] S302. The institutional end of the trust institution generates and discloses the post-quantum user declaration public key to the user end based on the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key of the trust institution.

[0099] In this embodiment, during the key declaration phase, the user end sends the national secret user public key and the post-quantum user public key to the institutional end of the trusted institution, that is, sends a request to obtain the post-quantum user declaration public key to the institutional end of the trusted institution.

[0100] The institutional side of the trust institution generates and discloses the post-quantum user declaration public key to the user side based on the national secret user public key, the post-quantum user public key, the national secret master public key of the trust institution, and the post-quantum master public key.

[0101] Optionally, step S302 further includes:

[0102] S401. The institutional end of the trust institution generates post-quantum public key signature data based on the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key of the trust institution.

[0103] S402. The trust institution concatenates the post-quantum public key signature data and the post-quantum user public key to generate and disclose the post-quantum user declaration public key to the user end.

[0104] Specifically, Figure 4 As shown, the institution end of the trust institution uses the national secret user public key P A , post-quantum user public key P APQC , the national secret master public key P and the post-quantum master public key P of the trust institution PQC , calculate the post-quantum public key signature data S APQC , post-quantum public key signature data S APQC The calculation expression is:

[0105] S APQC =sign(sk PQC ,H 512 (P APQC ||P A ||P PQC ||P))

[0106] Among them, H 512 For a summary function with an output length of 512 bits, increasing the output length of the hash function can effectively resist the quantum search algorithm.

[0107] The trust institution's institutional end signs the post-quantum public key data S APQC and the post-quantum user public key P APQC Splice, generate and publish the post-quantum user declaration public key W to the user end APQC , the post-quantum user declares the public key W APQC Expressed as: W APQC =P APQC ||S APQC .

[0108] In the method provided in the embodiment of the present application, the user end sends the national secret user public key and the post-quantum user public key to the institutional end of the trust institution. The institutional end of the trust institution generates and discloses the post-quantum user declaration public key to the user end based on the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key of the trust institution. The institutional end of the trust institution generates the post-quantum user declaration public key to resist the attack of the quantum algorithm.

[0109] The embodiment of the present application also provides another possible implementation of the implicit certificate public key processing method integrating the post-quantum algorithm. Figure 5 A fifth schematic diagram of a method for processing an implicit certificate public key integrating a post-quantum algorithm provided in an embodiment of the present application, as shown in FIG. Figure 5 As shown, the method also includes:

[0110] S501. The public key user unseals the hybrid declared public key to obtain the national secret user declared public key and the post-quantum user declared public key.

[0111] S502, the public key user obtains the national secret user public key and the post-quantum user public key respectively according to the national secret user declared public key and the post-quantum user declared public key;

[0112] S503. The public key user encrypts and verifies the implicit certificate of the target user based on the national secret user public key and the post-quantum user public key.

[0113] In this embodiment, during the public key usage phase, the public key user unseals the mixed declaration public key W to obtain the national secret user declaration public key W. A and the post-quantum user declares the public key W APQC . Then according to the national secret user's declared public key W A and the post-quantum user declares the public key W APQC , respectively obtain the national secret user public key P A and the post-quantum user public key P APQC .

[0114] The public key user uses the national secret user public key P A and the post-quantum user public key P APQC Before verifying the implicit certificate of the target user, the user uses the preset national secret signature algorithm to sign the data to be verified according to the national secret user private key to obtain the national secret signature data S SM2 , and use the preset post-quantum signature algorithm to sign the data to be verified according to the post-quantum user private key to obtain the post-quantum signature data S PQC , and then the data to be verified and the national secret signature data S SM2 and post-quantum signature data S PQC Sent to the public key user.

[0115] The public key user uses the preset national secret signature verification algorithm and uses the national secret user public key P A For the national secret signature data S SM2 Perform signature verification, obtain the national secret signature verification data, and use the preset post-quantum signature verification algorithm to verify the post-quantum user public key P APQC For the post-quantum signature data S PQC Perform signature verification to obtain post-quantum signature verification data, and then compare whether the national secret signature verification data is consistent with the data to be verified, and compare whether the post-quantum signature verification data is consistent with the data to be verified, obtain the verification result, and determine whether the data transmission is complete.

[0116] The public key user uses the national secret user public key P A and the post-quantum user public key P APQC , encrypt the implicit certificate of the target user. Specifically, the data to be encrypted is split to obtain the first data to be encrypted and the second data to be encrypted. The public key user uses the preset national secret encryption algorithm according to the national secret user public key P A The first data to be encrypted is encrypted to obtain the national secret encrypted ciphertext sm2enc, and the preset post-quantum encryption algorithm is used according to the post-quantum user public key P APQC The second data to be encrypted is encrypted to obtain the post-quantum encrypted ciphertext pqcenc, and then the national encryption ciphertext sm2enc and the post-quantum encryption ciphertext pqcenc are encapsulated to obtain a mixed encrypted ciphertext and send it to the user end.

[0117] After the user end receives the hybrid encrypted ciphertext, it decapsulates the hybrid encrypted ciphertext to obtain the national secret encryption ciphertext sm2enc and the post-quantum encryption ciphertext pqcenc, and then uses the preset national secret decryption algorithm to decrypt the national secret encrypted ciphertext sm2enc according to the national secret user private key to obtain the first data to be encrypted, and uses the preset post-quantum decryption algorithm to decrypt the post-quantum encrypted ciphertext pqcenc according to the post-quantum user private key to obtain the second data to be encrypted, and then concatenates the first data to be encrypted and the second data to be encrypted to obtain the data to be encrypted.

[0118] In the method provided in the embodiment of the present application, the public key user end unseals the hybrid declared public key to obtain the national secret user declared public key and the post-quantum user declared public key. The public key user end obtains the national secret user public key and the post-quantum user public key respectively according to the national secret user declared public key and the post-quantum user declared public key. The public key user end encrypts and verifies the implicit certificate of the target user according to the national secret user public key and the post-quantum user public key. The encryption and verification of the implicit certificate of the target user by using the two public keys, the national secret user public key and the post-quantum user public key, can effectively resist the attack of quantum algorithms.

[0119] The embodiment of the present application also provides another possible implementation of the implicit certificate public key processing method integrating the post-quantum algorithm. Figure 6 Schematic diagram of a method for processing an implicit certificate public key integrating a post-quantum algorithm provided in an embodiment of the present application, as shown in FIG. Figure 6 As shown, the public key user obtains the national secret user public key and the post-quantum user public key according to the national secret user's declared public key and the post-quantum user's declared public key, respectively, including:

[0120] S601. The public key user calculates the national secret user public key based on the national secret user's declared public key and the national secret master public key of the trusted institution.

[0121] In this embodiment, during the public key usage phase, the public key user uses a preset national secret algorithm and generates a public key W according to the national secret user declaration. A And the national secret master public key P, calculate the national secret user public key P A Specifically, according to the target user's ID A And the national secret master public key P, generate the national secret user public key parameter H A , and then according to the national secret user public key parameter H A And the national secret user declares the public key W A , generate the user private key parameter λ, and finally use the user private key parameter λ, the national secret master public key P of the trust institution, and the user's declared public key W A , generate the target user's national secret user public key P A , generate the target user's national secret user public key as: P A =W A +[λ]P.

[0122] S602. The public key user parses the post-quantum user declared public key to obtain the post-quantum user public key and the corresponding post-quantum public key signature data.

[0123] Specifically, the public key user declares the public key W to the post-quantum user APQC Parse and obtain the post-quantum user public key P APQC And the corresponding post-quantum public key signature data S APQC .

[0124] Optionally, the public key user verifies the post-quantum public key signature data based on the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key.

[0125] Specifically, the public key user uses the post-quantum master public key P PQC , with P APQC ||P A ||P PQC ||P is the quantum public key signature data S after the original text is verified APQC , if the verification is successful, the post-quantum user public key P is determinedAPQC If the verification is successful, the public key user can encrypt and verify the implicit certificate of the target user based on the national secret user public key and the post-quantum user public key.

[0126] Figure 7 A schematic diagram of a method for generating an implicit certificate public key integrating a post-quantum algorithm provided in an embodiment of the present application is shown in FIG. Figure 7 As shown in the master key phase, the trust institution generates the corresponding national secret master public-private key pair (sk, P) and post-quantum master public-private key pair (sk PQC ,P PQC ), and generate the national secret user public key parameter H for the target user A The user end uses the national secret key generation algorithm in the preset national secret algorithm to generate a temporary user public and private key pair for the target user (d' A ,U A ).

[0127] In the key declaration phase, the user sends a temporary user public key U to the trusted institution. A , that is, sending the target user's national secret user declaration public key request to the institution end, and the institution end of the trust institution receives the temporary user public key U sent by the user end A , generate a third random number, and according to the third random number w and the temporary user public key U A , generate the national secret user declaration public key W A The trust institution uses the national secret user public key parameter H for the target user. A And the national secret user declared public key W A , generating a user private key parameter λ for the target user, the trust institution generates and returns the national secret user private key component t for the target user to the user end according to the user private key parameter λ for the target user, the first random number sk and the third random number w. A , the user end uses the national secret user private key component t A And the temporary user private key d' A , generate the target user's national secret user private key d A , and according to the national secret user's declared public key W A And the pre-obtained national secret master public key P of the trust institution, generate the national secret user public key P of the target user A .

[0128] The user then sends the national secret user public key P to the trust institution. A and the post-quantum user public key P APQC The trust institution uses the national secret user public key P A , post-quantum user public key P APQC , the national secret master public key P and the post-quantum master public key P of the trust institutionPQC , generate and publish the post-quantum user declaration public key W to the user end APQC The client declares the public key W to the national cryptographic user A and the post-quantum user declares the public key W APQC The mixed declaration public key W of the target user is obtained by splicing, and the mixed declaration public key W is made public to the public key user.

[0129] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art who is familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A method for processing implicit certificate public keys integrating post-quantum algorithms, characterized in that: Applied to an implicit certificate public key system, the implicit certificate public key system includes: an institution end of a trust institution, a public key use end and a user end, and the method includes: The user end obtains the national secret user declaration public key of the target user from the institution end of the trust institution; The user terminal generates a national secret user public-private key pair of the target user according to the national secret user declared public key; The user terminal generates a post-quantum user public-private key pair for the target user; The user end obtains the post-quantum user declaration public key from the institution end of the trust institution according to the national secret user public key in the national secret user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair; The user end concatenates the national secret user declared public key and the post-quantum user declared public key to obtain the hybrid declared public key of the target user, and discloses the hybrid declared public key to the public key user end; the hybrid declared public key is used to encrypt and decrypt or verify the signature of the target user's implicit certificate.

2. The method according to claim 1, characterized in that The user terminal obtains the national secret user declaration public key of the target user from the trust institution, including: The user terminal uses a preset national encryption algorithm to generate a temporary public and private key pair of the target user; The user end obtains the national secret user declaration public key and the national secret user private key component from the institution end of the trust institution according to the temporary user public key in the temporary user public-private key pair; The user terminal generates the target user's national secret user public-private key pair according to the national secret user declaration public key, including: The user terminal generates the national secret user private key of the target user according to the national secret user private key component and the temporary user private key in the temporary user public-private key pair; The user terminal generates the national secret user public key of the target user according to the national secret user declared public key and the pre-acquired national secret master public key of the trusted institution.

3. The method according to claim 1, characterized in that The user terminal generates a post-quantum user public-private key pair for the target user, including: The user terminal uses a preset post-quantum algorithm to generate a post-quantum user public-private key pair for the target user.

4. The method according to claim 1, characterized in that: The user terminal obtains the post-quantum user declaration public key from the trust institution according to the national secret user public key in the national secret user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair, including: The user terminal sends the national secret user public key and the post-quantum user public key to the institution terminal of the trust institution; The institutional end of the trust institution generates and discloses the post-quantum user declaration public key to the user end based on the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key of the trust institution.

5. The method according to claim 4, characterized in that The institution end of the trust institution generates and discloses the post-quantum user declaration public key to the user end according to the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key of the trust institution, including: The institution end of the trust institution generates post-quantum public key signature data according to the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key of the trust institution; The institution end of the trust institution concatenates the post-quantum public key signature data and the post-quantum user public key to generate and disclose the post-quantum user declaration public key to the user end.

6. The method according to claim 1, characterized in that The method further comprises: The public key user unseals the hybrid declared public key to obtain the national cryptographic user declared public key and the post-quantum user declared public key; The public key user terminal obtains the national secret user public key and the post-quantum user public key respectively according to the national secret user declared public key and the post-quantum user declared public key; The public key user end encrypts and verifies the implicit certificate of the target user based on the national secret user public key and the post-quantum user public key.

7. The method according to claim 6, characterized in that The public key user terminal obtains the national secret user public key and the post-quantum user public key respectively according to the national secret user declared public key and the post-quantum user declared public key, including: The public key user calculates the national secret user public key according to the national secret user's declared public key and the national secret master public key of the trusted institution; The public key user end parses the post-quantum user declared public key to obtain the post-quantum user public key and corresponding post-quantum public key signature data.

8. The method according to claim 7, characterized in that The public key user parses the post-quantum user declared public key to obtain the post-quantum user public key and the corresponding post-quantum public key signature data, including: The public key user verifies the post-quantum public key signature data according to the national secret user public key, the post-quantum user public key, the national secret master public key and the post-quantum master public key.

9. An implicit certificate public key system, characterized in that: The implicit certificate public key system includes: an institutional end of a trust institution, a public key usage end and a user end. The implicit certificate public key system is used to execute the steps of the implicit certificate public key processing method integrating the post-quantum algorithm as described in any one of claims 1 to 8.

10. A user terminal, characterized in that: include: A processor, a storage medium and a bus, wherein the storage medium stores program instructions executable by the processor. When the user terminal runs, the processor communicates with the storage medium through the bus, and the processor executes the steps of the implicit certificate public key processing method integrating the post-quantum algorithm as described in any one of claims 1 to 8.

Images