Post quantum cryptography and cryptographic algorithm mixed signature and verification method and device

Abstract

The invention provides a post quantum cryptography and national cryptography algorithm mixed signature and verification method and device, and relates to the technical field of cryptography application. The method comprises the following steps: performing hash operation on a to-be-signed message plaintext by adopting a preset national cryptographic hash algorithm to obtain a first hash value, and performing mixed signature operation on the first hash value and the to-be-signed message plaintext according to a national cryptographic signature private key component and a post-quantum signature private key component in a mixed signature private key of a sender to obtain a second hash value; and obtaining a national secret signature value and a post-quantum signature value, packaging the national secret signature value and the post-quantum signature value to obtain a mixed signature value corresponding to the to-be-signed message plaintext, and sending the mixed signature value and the to-be-signed message plaintext to a receiver. Due to the fact that the mixed signature value sent by the sending party to the receiving party comprises the national secret signature value and the post-quantum signature value, an attacker needs to crack the national secret signature value and the post-quantum signature value at the same time to achieve identity anti-fake attack, and guarantee is provided for integrity and authenticity of message plaintext transmission.

Description

Technical Field

[0001] The present invention relates to the field of cryptographic application technology, and in particular to a post-quantum cryptography and national secret algorithm hybrid signature, verification method and device. Background Art

[0002] With the development of quantum computing, the traditional elliptic curve SM2 signature algorithm is based on mathematical problems such as large number factorization, discrete logarithm or elliptic curve discrete logarithm. Quantum computers use the quantum Shor algorithm to break it in polynomial time. At the same time, the quantum search Grover algorithm can accelerate the search for hash collisions, and also poses a challenge to the cryptographic hash SM3 algorithm, and its security may be halved.

[0003] In order to resist the threat of quantum computing and improve the security of the digital signature mechanism, the Post-Quantum Cryptography algorithm is integrated. However, during the implementation process, the algorithm is directly migrated from SM2 to PQC. During the standardization transition period, the security of the PQC signature algorithm has not been fully verified, and coexistence with the SM2 classic key and how to transition to the post-quantum era more safely and smoothly are not considered. Alternatively, although the coexistence of the SM2 and PQC signature algorithms is considered, the two algorithms are completely independent and have not been fused and encapsulated. The upper-layer cryptographic protocols and applications need to perform SM2 and PQC signature processing on the SM3 hash value of the message, respectively. Therefore, the modification workload of PQC migration is extremely large. At the same time, the risk of hash collision attack on the SM3 algorithm by quantum computing is not considered. Attackers may use quantum algorithms such as the Grover algorithm to construct inputs with the same hash value as the current message, thereby tampering with the signed message. Summary of the invention

[0004] The purpose of the present invention is to provide a post-quantum cryptography and national secret algorithm hybrid signature, verification method and device to address the deficiencies in the above-mentioned prior art, so that the plaintext of the message to be signed can be hybridly signed by post-quantum cryptography and national secret algorithm, which has the ability to resist quantum attacks and provides a guarantee for the integrity and authenticity of the plaintext transmission of the message.

[0005] To achieve the above purpose, the technical solution adopted in the embodiment of the present application is as follows:

[0006] In the first aspect, the embodiment of the present application provides a hybrid signature method of post-quantum cryptography and national secret algorithm, which is applied to the sender, and the method includes:

[0007] Use the preset national secret hash algorithm to perform a hash operation on the plaintext of the signature message to obtain a first hash value;

[0008] According to the national secret signature private key component and the post-quantum signature private key component in the hybrid signature private key of the sender, a hybrid signature operation is performed on the first hash value and the plaintext of the message to be signed to obtain a national secret signature value and a post-quantum signature value, wherein the national secret signature private key component is a signature private key component obtained in advance using a national secret key algorithm;

[0009] Encapsulating the national secret signature value and the post-quantum signature value to obtain a mixed signature value corresponding to the plaintext of the message to be signed;

[0010] Send the mixed signature value and the plaintext of the message to be signed to a recipient.

[0011] In an optional implementation, performing a hybrid signature operation on the first hash value and the plaintext of the message to be signed according to the national secret signature private key component and the post-quantum signature private key component in the hybrid signature private key of the sender to obtain a national secret signature value and a post-quantum signature value includes:

[0012] According to the national secret signature private key component, the national secret signature algorithm corresponding to the national secret key algorithm is used to perform a signature operation on the first hash value to obtain the national secret signature value;

[0013] According to the post-quantum signature private key component, a post-quantum signature algorithm is used to perform a signature operation on the national secret signature value and the plaintext of the message to be signed to obtain the post-quantum signature value.

[0014] In an optional implementation, the step of performing a signature operation on the national secret signature value and the plaintext of the message to be signed using a post-quantum signature algorithm according to the post-quantum signature private key component to obtain the post-quantum signature value includes:

[0015] Using the preset national secret hash algorithm, a hash operation is performed on the national secret signature value and the plaintext of the message to be signed to obtain a second hash value;

[0016] According to the post-quantum signature private key component, the post-quantum signature algorithm is used to perform a signature operation on the second hash value to obtain the post-quantum signature value.

[0017] In an optional embodiment, the method further comprises:

[0018] Call the national secret key algorithm to generate a key pair interface to generate a national secret signature key pair, the national secret signature key pair includes: the national secret signature private key component and the national secret signature public key component;

[0019] Calling the post-quantum signature algorithm to generate a key pair interface to generate a post-quantum signature key pair, the post-quantum signature key pair comprising: the post-quantum signature private key component and the post-quantum signature public key component;

[0020] Encapsulating the national secret signature private key component and the post-quantum signature private key component to obtain the hybrid signature private key;

[0021] The national secret signature public key component and the post-quantum signature public key component are encapsulated to obtain a hybrid signature public key, and the hybrid signature public key is made public.

[0022] In a second aspect, the embodiment of the present application further provides a hybrid signature verification method of post-quantum cryptography and national secret algorithm, which is applied to the receiving party, and the method includes:

[0023] Receive the mixed signature value to be verified and the plain text of the message to be verified sent by the sender; the mixed signature value to be verified is the signature value obtained by the sender using the mixed signature private key of the sender to mix and sign the plain text of the message to be verified;

[0024] Obtaining the sender's hybrid signature public key;

[0025] Decapsulating the mixed signature value to be verified to obtain the national secret signature value to be verified and the post-quantum signature value to be verified;

[0026] Using a preset national secret hash algorithm, a hash operation is performed on the plaintext of the message to be verified to obtain a first hash value to be verified;

[0027] According to the national secret signature public key component and the post-quantum signature public key component in the hybrid signature public key, the first hash value to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified are signed and verified to obtain a national secret signature verification result and a post-quantum signature verification result, wherein the national secret signature public key component is a signature public key component obtained in advance using a national secret key algorithm;

[0028] According to the national secret signature verification result and the post-quantum signature verification result, the verification result corresponding to the plaintext of the message to be verified is determined.

[0029] In an optional implementation, the step of performing signature verification on the first hash value to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified according to the national secret signature public key component and the post-quantum signature public key component in the hybrid signature public key to obtain a national secret signature verification result and a post-quantum signature verification result, including:

[0030] According to the national secret signature public key component, the national secret signature verification algorithm corresponding to the national secret key algorithm is used to perform signature verification on the first hash value to be verified and the national secret signature value to be verified to obtain the national secret signature verification result;

[0031] According to the post-quantum signature public key component, a post-quantum signature verification algorithm is used to perform signature verification on the message plaintext to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified to obtain the post-quantum signature verification result.

[0032] In an optional implementation, the post-quantum signature verification algorithm is used to perform signature verification on the plaintext of the message to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified according to the post-quantum signature public key component to obtain the post-quantum signature verification result, including:

[0033] Using a preset national secret hash algorithm, a hash operation is performed on the national secret signature value to be verified and the plain text of the message to be verified to obtain a second hash value to be verified;

[0034] According to the post-quantum signature public key component, a post-quantum signature verification algorithm is used to perform signature verification on the second hash value to be verified and the post-quantum signature value to be verified to obtain the post-quantum signature verification result.

[0035] In an optional implementation manner, determining the verification result corresponding to the plaintext of the message to be verified according to the national secret signature verification result and the post-quantum signature verification result includes:

[0036] If both the national secret signature verification result and the post-quantum signature verification result are successful, then determining that the verification result corresponding to the plaintext of the message to be verified is successful;

[0037] If the national secret signature verification result and / or the post-quantum signature verification result is a verification failure, then it is determined that the verification result corresponding to the plaintext of the message to be verified is a verification failure.

[0038] In the third aspect, an embodiment of the present application also provides a sending device, comprising: a processor, a storage medium and a bus, the storage medium storing program instructions executable by the processor, when the sending device is running, the processor and the storage medium communicate through the bus, and the processor executes the program instructions to perform the steps of the post-quantum cryptography and national secret algorithm hybrid signature method as described in any one of the first aspects.

[0039] In the fourth aspect, an embodiment of the present application also provides a receiving device, comprising: a processor, a storage medium and a bus, wherein the storage medium stores program instructions executable by the processor, and when the receiving device is running, the processor and the storage medium communicate through the bus, and the processor executes the program instructions to perform the steps of the post-quantum cryptography and national secret algorithm hybrid signature verification method as described in any one of the second aspects.

[0040] The beneficial effect of the present application is that the embodiment of the present application provides a post-quantum cryptography and national secret algorithm hybrid signature, verification method and device, the method comprising: using a preset national secret hash algorithm to perform a hash operation on the plaintext of the message to be signed to obtain a first hash value, and according to the national secret signature private key component and the post-quantum signature private key component in the hybrid signature private key of the sender, performing a hybrid signature operation on the first hash value and the plaintext of the message to be signed to obtain a national secret signature value and a post-quantum signature value, wherein the national secret signature private key component is a signature private key component obtained in advance using the national secret key algorithm, encapsulating the national secret signature value and the post-quantum signature value to obtain a hybrid signature value corresponding to the plaintext of the message to be signed, and sending the hybrid signature value and the plaintext of the message to be signed to the recipient. Since the hybrid signature value sent by the sender to the receiver includes the national secret signature value and the post-quantum signature value, during the transmission process, the attacker needs to crack both the national secret signature value and the post-quantum signature value at the same time to achieve identity anti-impersonation attack. At the same time, the sender uses post-quantum cryptography to participate in the hybrid signature, which has the ability to resist quantum attacks and provides a guarantee for the integrity and authenticity of the plaintext transmission of the message. Finally, due to the hybrid signature operation of post-quantum cryptography and national secret key algorithm, it is fully compatible with the interface and functions of the national secret key algorithm signature operation, which greatly reduces the difficulty and workload of migrating upper-layer cryptographic protocols and applications from the national secret key algorithm to PQC. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0042] Figure 1 One of the flow charts of a hybrid signature method of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application;

[0043] Figure 2 A second flow chart of a hybrid signature method of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application;

[0044] Figure 3 A flowchart of a hybrid signature method of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application is shown in FIG3;

[0045] Figure 4 A fourth flowchart of a hybrid signature method of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application;

[0046] Figure 5One of the flow charts of a hybrid signature verification method of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application;

[0047] Figure 6 A second flowchart of a hybrid signature verification method of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application;

[0048] Figure 7 A flowchart of a hybrid signature verification method of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application is shown in FIG3;

[0049] Figure 8 A functional module diagram of a hybrid signature device of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application;

[0050] Fig. 9 A functional module diagram of a hybrid signature verification device of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application;

[0051] Fig.10 A schematic diagram of a sending device provided in an embodiment of the present application;

[0052] Fig.11 A schematic diagram of a receiving device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0053] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments.

[0054] Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the present application for which protection is sought, but merely represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0055] In the description of the present application, it should be noted that if the terms "upper", "lower", etc. appear, the orientation or position relationship indicated is based on the orientation or position relationship shown in the drawings, or is the orientation or position relationship in which the product of the application is usually placed when used. It is only for the convenience of describing the present application and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present application.

[0056] In addition, the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0057] It should be noted that, in the absence of conflict, the features in the embodiments of the present application may be combined with each other.

[0058] In order to ensure the integrity and authenticity of the message after plaintext transmission, the embodiment of the present application provides a hybrid signature method of post-quantum cryptography and national secret algorithm, wherein post-quantum cryptography (PQC) is a new encryption algorithm that can resist quantum computer attacks. Post-quantum cryptography can not only run safely on traditional computers, but also resist future quantum computer attacks. The national secret algorithm includes: a preset national secret hash algorithm and a national secret key algorithm, wherein the preset national secret hash algorithm is the SM3 algorithm, which is a cryptographic hash (hash) algorithm, suitable for digital signatures in cryptographic applications and the generation and verification of message authentication codes and the generation of random numbers, which can meet the security requirements of various cryptographic applications, and the national secret key algorithm is the SM2 algorithm, which uses elliptic curve cryptography as its mathematical basis, and is an asymmetric cryptographic algorithm for digital signatures and key exchange.

[0059] The post-quantum cryptography and the national secret algorithm are used to perform a hybrid signature on the plaintext of the message to be signed. The method includes: using a preset national secret hash algorithm, performing a hash operation on the plaintext of the message to be signed, obtaining a first hash value, performing a hybrid signature operation on the first hash value according to the national secret signature private key component and the post-quantum signature private key component in the hybrid signature private key of the sender, obtaining a national secret signature value and a post-quantum signature value, wherein the national secret signature private key component is a signature private key component obtained in advance using the national secret key algorithm, encapsulating the national secret signature value and the post-quantum signature value, obtaining a hybrid signature value corresponding to the plaintext of the message to be signed, and sending the hybrid signature value and the plaintext of the message to be signed to the receiver. The hybrid signature value includes the national secret signature value and the post-quantum signature value. Therefore, the attacker needs to crack the national secret signature value and the post-quantum signature value at the same time to achieve identity anti-impersonation attack and provide protection for the integrity and authenticity of the plaintext transmission of the message.

[0060] The following is a detailed explanation of the post-quantum cryptography and national secret algorithm hybrid signature method provided in the embodiment of the present application through specific examples in conjunction with the accompanying drawings. Figure 1 One of the flow charts of a hybrid signature method of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application; Figure 1 As shown, the method includes:

[0061] S101. Use a preset national secret hash algorithm to perform a hash operation on the plaintext of the message to be signed to obtain a first hash value.

[0062] In this embodiment, the plain text of the message to be signed is data output by the business system of the sender's device, and is also data that needs to be transmitted to the receiver.

[0063] Among them, the preset national secret hash algorithm is the SM3 algorithm. The sender uses the SM3 algorithm to perform a hash operation on the plaintext of the signed message to obtain a first hash value HASH1.

[0064] S102. Perform a mixed signature operation on the first hash value and the plaintext of the message to be signed according to the national secret signature private key component and the post-quantum signature private key component in the sender's mixed signature private key to obtain a national secret signature value and a post-quantum signature value.

[0065] Among them, the national secret signature private key component is the signature private key component obtained in advance using the national secret key algorithm.

[0066] S103. Encapsulate the national secret signature value and the post-quantum signature value to obtain a mixed signature value corresponding to the plaintext of the message to be signed.

[0067] Specifically, the sender pre-generates the sender's national secret signature private key component using the national secret key algorithm, namely the SM2 algorithm.

[0068] Then, according to the national secret signature private key component and the post-quantum signature private key component, a mixed signature operation is performed on the first hash value HASH1 and the plaintext of the message to be signed to obtain the national secret signature value and the post-quantum signature value, and the two components of the national secret signature value and the post-quantum signature value are concatenated and encapsulated to obtain the mixed signature value corresponding to the plaintext of the message to be signed.

[0069] S104. Send the mixed signature value and the plaintext of the message to be signed to the recipient.

[0070] After the sender obtains the mixed signature value corresponding to the plaintext of the message to be signed, it sends the mixed signature value and the plaintext of the message to be signed to the receiver, so that the receiver verifies the plaintext of the message to be signed according to the mixed signature value.

[0071] It should be noted that the upper-layer applications and cryptographic protocols pre-provide SM2 algorithm-compatible interfaces, making the interfaces and functions of post-quantum cryptography and national secret key algorithm signature operations fully compatible.

[0072] In summary, an embodiment of the present application provides a hybrid signature method of post-quantum cryptography and national secret algorithm, which is applied to a sender. The method includes: using a preset national secret hash algorithm to perform a hash operation on the plaintext of the message to be signed to obtain a first hash value, and according to the national secret signature private key component and the post-quantum signature private key component in the hybrid signature private key of the sender, performing a hybrid signature operation on the first hash value and the plaintext of the message to be signed to obtain a national secret signature value and a post-quantum signature value, wherein the national secret signature private key component is a signature private key component obtained in advance using the national secret key algorithm, encapsulating the national secret signature value and the post-quantum signature value to obtain a hybrid signature value corresponding to the plaintext of the message to be signed, and sending the hybrid signature value and the plaintext of the message to be signed to the receiver. Since the hybrid signature value sent by the sender to the receiver includes the national secret signature value and the post-quantum signature value, during the transmission process, the attacker needs to crack both the national secret signature value and the post-quantum signature value at the same time to achieve identity anti-impersonation attack. At the same time, the sender uses post-quantum cryptography to participate in the hybrid signature, which has the ability to resist quantum attacks and provides a guarantee for the integrity and authenticity of the plaintext transmission of the message. Finally, due to the hybrid signature operation of post-quantum cryptography and national secret key algorithm, it is fully compatible with the interface and functions of the national secret key algorithm signature operation, which greatly reduces the difficulty and workload of migrating upper-layer cryptographic protocols and applications from the national secret key algorithm to PQC.

[0073] Based on the hybrid signature of post-quantum cryptography and national secret algorithm provided in the above embodiment, the embodiment of the present application also provides another possible implementation method of the hybrid signature method of post-quantum cryptography and national secret algorithm, Figure 2 The second flow chart of a hybrid signature method of post-quantum cryptography and national secret algorithm provided in the embodiment of this application. Figure 2 As shown, according to the national secret signature private key component and the post-quantum signature private key component in the hybrid signature private key of the sender, a hybrid signature operation is performed on the first hash value and the plaintext of the message to be signed to obtain the national secret signature value and the post-quantum signature value, including:

[0074] S201. According to the national secret signature private key component, a national secret signature algorithm corresponding to the national secret key algorithm is used to perform a signature operation on the first hash value to obtain a national secret signature value.

[0075] S202. According to the post-quantum signature private key component, a post-quantum signature algorithm is used to perform a signature operation on the national secret signature value and the plaintext of the message to be signed to obtain a post-quantum signature value.

[0076] In this embodiment, the sender uses the SM2 signature algorithm to perform a signature operation on the first hash value according to the national secret signature private key component, namely the SM2 signature private key component, to obtain an SM2 signature value.

[0077] The sender also uses the PQC signature algorithm to perform a signature operation on the SM2 signature value and the plaintext of the message to be signed based on the post-quantum signature private key component, namely the PQC signature private key component, to obtain the PQC signature value.

[0078] In the method provided in the embodiment of the present application, according to the national secret signature private key component, the national secret signature algorithm corresponding to the national secret key algorithm is used to perform a signature operation on the first hash value to obtain the national secret signature value, and according to the post-quantum signature private key component, the post-quantum signature algorithm is used to perform a signature operation on the national secret signature value and the plaintext of the message to be signed to obtain the post-quantum signature value, thereby realizing a hybrid signature of the plaintext of the message to be signed with the post-quantum cryptography and the national secret algorithm.

[0079] The present application embodiment also provides another possible implementation of a hybrid signature method of post-quantum cryptography and national secret algorithm. Figure 3 The third flow chart of a hybrid signature method of post-quantum cryptography and national secret algorithm provided in the embodiment of this application. Figure 3 As shown, according to the post-quantum signature private key component, the post-quantum signature algorithm is used to perform a signature operation on the national secret signature value and the plaintext of the message to be signed to obtain the post-quantum signature value, including:

[0080] S301. Use a preset national secret hash algorithm to perform a hash operation on the national secret signature value and the plaintext of the message to be signed to obtain a second hash value.

[0081] In this embodiment, the sender concatenates the national secret signature value and the plaintext of the message to be signed, and then uses the preset national secret hash algorithm, namely the SM3 algorithm, to perform a hash operation on the concatenated national secret signature value and the plaintext of the message to be signed to obtain a second hash value HASH2.

[0082] S302. Perform a signature operation on the second hash value using a post-quantum signature algorithm according to the post-quantum signature private key component to obtain a post-quantum signature value.

[0083] Specifically, the sender performs a signature operation on the second hash value HASH2 using the PQC signature algorithm according to the post-quantum signature private key component, that is, the PQC signature private key component, to obtain a PQC signature value.

[0084] In the method provided in the embodiment of the present application, a preset national secret hash algorithm is used to perform a hash operation on the national secret signature value and the plaintext of the message to be signed to obtain a second hash value, and a post-quantum signature algorithm is used to perform a signature operation on the second hash value according to the post-quantum signature private key component to obtain a post-quantum signature value. Since the sender performs two different hash operations on the plaintext of the message to be signed, the ability to resist hash collision attacks caused by quantum computing can be improved, providing stronger protection for the integrity and authenticity of the plaintext of the message to be signed.

[0085] The present application embodiment also provides another possible implementation of a hybrid signature method of post-quantum cryptography and national secret algorithm. Figure 4 The fourth flow chart of a hybrid signature method of post-quantum cryptography and national secret algorithm provided in the embodiment of this application. Figure 4 As shown, the method also includes:

[0086] S401. Call the national secret key algorithm to generate a key pair interface to generate a national secret signature key pair.

[0087] Among them, the national secret signature key pair includes: the national secret signature private key component and the national secret signature public key component.

[0088] In this embodiment, the sender generates an SM2 signature key pair by calling the SM2 key algorithm to generate a key pair interface. The SM2 signature key pair includes: an SM2 signature private key component and an SM2 signature public key component.

[0089] S402: Call the post-quantum signature algorithm to generate a key pair interface to generate a post-quantum signature key pair.

[0090] Among them, the post-quantum signature key pair includes: a post-quantum signature private key component and a post-quantum signature public key component.

[0091] The sender generates a PQC signature key pair by calling the PQC algorithm to generate a key pair interface. The PQC signature key pair includes: a PQC signature private key component and a PQC signature public key component.

[0092] S403. Encapsulate the national secret signature private key component and the post-quantum signature private key component to obtain a hybrid signature private key.

[0093] Specifically, the SM2 signature private key component and the PQC signature private key component are concatenated and encapsulated to obtain a hybrid signature private key. It should be noted that the hybrid signature private key is stored in the sender's device as key sensitive data, and has security protection measures such as confidentiality and integrity. It does not appear in plain text outside the sender's device.

[0094] S404. Encapsulate the national secret signature public key component and the post-quantum signature public key component to obtain a hybrid signature public key, and make it public.

[0095] Specifically, the SM2 signature public key component and the PQC signature public key component are concatenated and encapsulated to obtain a hybrid signature private key. It should be noted that the hybrid signature public key is a public key and is securely stored in the non-volatile storage area of ​​the sender's device. The receiver and the sender can use the other party's hybrid signature public key to verify the signature by exchanging the hybrid signature public key or a certificate containing the hybrid signature public key.

[0096] In the method provided in the embodiment of the present application, the hybrid signature operation of post-quantum cryptography and national secret algorithm is encapsulated, and an interface compatible with the SM2 encryption algorithm is provided. Therefore, when the SM2 encryption operation is migrated to PQC, the modification of the upper-layer application and cryptographic protocol is minimal, greatly reducing the difficulty and workload of migration.

[0097] After the receiver receives the mixed signature value and message plaintext sent by the sender, it is also necessary to verify the mixed message plaintext according to the mixed signature value. Therefore, the embodiment of the present application also provides a mixed signature verification method of post-quantum cryptography and national secret algorithm, which is applied to the receiver. The following is a detailed explanation of the mixed signature verification method of post-quantum cryptography and national secret algorithm provided in the embodiment of the present application through specific examples in combination with the accompanying drawings. Figure 5 One of the flow charts of a hybrid signature verification method of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application; Figure 5 As shown, the method includes:

[0098] S501. Receive the mixed signature value to be verified and the plain text of the message to be verified sent by the sender.

[0099] The mixed signature value to be verified is a signature value obtained by the sender using the sender's mixed signature private key to perform a mixed signature on the plaintext of the message to be verified.

[0100] S502: Obtain the sender's hybrid signature public key.

[0101] In this embodiment, the receiver receives the mixed signature value to be verified and the plain text of the message to be verified sent by the sender. The steps for generating the mixed signature value to be verified can refer to the above steps S101-S404, which will not be repeated here.

[0102] The sender makes the hybrid signature public key public in advance so that the receiver can obtain the sender's hybrid signature public key.

[0103] S503, decapsulate the mixed signature value to be verified to obtain the national secret signature value to be verified and the post-quantum signature value to be verified.

[0104] Since the sender encapsulates the national secret signature value and the post-quantum signature value to obtain a mixed signature value, the receiver decapsulates the mixed signature value to be verified and obtains the national secret signature value to be verified and the post-quantum signature value to be verified, that is, the SM2 signature value to be verified and the PQC signature value to be verified.

[0105] S504: Use a preset national secret hash algorithm to perform a hash operation on the plaintext of the message to be verified to obtain a first hash value to be verified.

[0106] Specifically, the preset national secret hash algorithm is the SM3 algorithm. The receiving party adopts the SM3 algorithm to perform a hash operation on the plaintext of the message to be verified, and obtains the first hash value to be verified.

[0107] S505. According to the national secret signature public key component and the post-quantum signature public key component in the hybrid signature public key, signature verification is performed on the first hash value to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified to obtain the national secret signature verification result and the post-quantum signature verification result.

[0108] Among them, the national secret signature public key component is the signature public key component obtained in advance using the national secret key algorithm.

[0109] The national secret key algorithm is the SM2 key algorithm. The recipient decapsulates the hybrid signature public key to obtain the national secret signature public key component and the post-quantum signature public key component, that is, the SM2 signature public key component and the PQC signature public key component.

[0110] The recipient performs signature verification on the first hash value to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified based on the SM2 signature public key component and the PQC signature public key component, and obtains the national secret signature verification result and the post-quantum signature verification result.

[0111] S506. Determine the verification result corresponding to the plaintext of the message to be verified according to the national secret signature verification result and the post-quantum signature verification result.

[0112] Optionally, if both the national secret signature verification result and the post-quantum signature verification result are successful, then the verification result corresponding to the plaintext of the message to be verified is determined to be successful.

[0113] If the national secret signature verification result and / or the post-quantum signature verification result is a verification failure, then it is determined that the verification result corresponding to the plaintext of the message to be verified is a verification failure.

[0114] If the verification result corresponding to the plain text of the message to be verified is verification failure, it means that the plain text of the message to be verified is attacked and illegally tampered with during transmission.

[0115] In summary, an embodiment of the present application provides a hybrid signature verification method of post-quantum cryptography and national secret algorithm, which is applied to a receiving party, and the method includes: receiving a hybrid signature value to be verified and a plaintext message to be verified sent by a sender; the hybrid signature value to be verified is a signature value obtained by the sender using the sender's hybrid signature private key to perform a hybrid signature on the plaintext of the message to be verified; obtaining the sender's hybrid signature public key; decapsulating the hybrid signature value to be verified to obtain a national secret signature value to be verified and a post-quantum signature value to be verified; using a preset national secret hash algorithm, performing a hash operation on the plaintext of the message to be verified to obtain a first hash value to be verified; according to the national secret signature public key component and the post-quantum signature public key component in the hybrid signature public key, the first hash value to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified are signed and verified to obtain a national secret signature verification result and a post-quantum signature verification result, wherein the national secret signature public key component is a signature public key component obtained in advance using the national secret key algorithm; according to the national secret signature verification result and the post-quantum signature verification result, the verification result corresponding to the plaintext of the message to be verified is determined. Since the mixed signature value to be verified obtained by the recipient includes the national secret signature value to be verified and the post-quantum signature value to be verified, during the transmission process, the attacker needs to crack both the national secret signature value to be verified and the post-quantum signature value to be verified at the same time to achieve identity anti-impersonation attack, and has the ability to resist quantum attacks, providing protection for the integrity and authenticity of the plaintext transmission of the message.

[0116] Based on the hybrid signature verification of post-quantum cryptography and national secret algorithm provided in the above embodiment, the embodiment of the present application also provides another possible implementation method of the hybrid signature verification method of post-quantum cryptography and national secret algorithm. Figure 6 The second flow chart of a hybrid signature verification method of post-quantum cryptography and national secret algorithm provided in the embodiment of this application. Figure 6 As shown, according to the national secret signature public key component and the post-quantum signature public key component in the hybrid signature public key, the first hash value to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified are signed and verified to obtain the national secret signature verification result and the post-quantum signature verification result, including:

[0117] S601. According to the public key component of the national secret signature, a national secret signature verification algorithm corresponding to the national secret key algorithm is used to perform signature verification on the first hash value to be verified and the national secret signature value to be verified, and obtain a national secret signature verification result.

[0118] In this embodiment, the recipient performs signature verification on the first hash value to be verified and the national secret signature value to be verified using the SM2 signature verification algorithm according to the national secret signature public key component, namely the SM2 signature public key component, to obtain an SM2 signature verification result.

[0119] S602. According to the post-quantum signature public key component, a post-quantum signature verification algorithm is used to perform signature verification on the plaintext of the message to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified to obtain a post-quantum signature verification result.

[0120] Specifically, according to the post-quantum signature public key component, namely the PQC signature public key component, the PQC signature verification algorithm is used to perform signature verification on the plaintext of the message to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified to obtain the PQC signature verification result.

[0121] In the method provided in the embodiment of the present application, according to the national secret signature public key component, the national secret signature verification algorithm corresponding to the national secret key algorithm is used to perform signature verification on the first hash value to be verified and the national secret signature value to be verified, and the national secret signature verification result is obtained; according to the post-quantum signature public key component, the post-quantum signature verification algorithm is used to perform signature verification on the plaintext of the message to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified, and the post-quantum signature verification result is obtained, thereby realizing the hybrid signature verification of the first hash value to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified.

[0122] The present application embodiment also provides another possible implementation of the hybrid signature verification method of post-quantum cryptography and national secret algorithm. Figure 7 The third flow chart of a hybrid signature verification method of post-quantum cryptography and national secret algorithm provided in the embodiment of this application. Figure 7 As shown, according to the post-quantum signature public key component, the post-quantum signature verification algorithm is used to perform signature verification on the plaintext of the message to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified, and the post-quantum signature verification result is obtained, including:

[0123] S701. Use a preset national secret hash algorithm to perform a hash operation on the national secret signature value to be verified and the plain text of the message to be verified to obtain a second hash value to be verified.

[0124] In this embodiment, the recipient concatenates the SM2 signature value to be verified and the plaintext of the message to be verified, and then uses the preset national secret hash algorithm, namely the SM3 algorithm, to perform a hash operation on the concatenated SM2 signature value to be verified and the plaintext of the message to be verified to obtain a second hash value to be verified.

[0125] S702. According to the post-quantum signature public key component, a post-quantum signature verification algorithm is used to perform signature verification on the second hash value to be verified and the post-quantum signature value to be verified to obtain a post-quantum signature verification result.

[0126] Specifically, the recipient performs a signature operation on the second hash value to be verified and the PQC signature value to be verified using the PQC signature verification algorithm according to the post-quantum signature public key component, namely the PQC signature public key component, to obtain a PQC signature verification result.

[0127] In the method provided in the embodiment of the present application, a preset national secret hash algorithm is used to perform a hash operation on the national secret signature value to be verified and the plaintext of the message to be verified to obtain a second hash value to be verified, and according to the post-quantum signature public key component, a post-quantum signature verification algorithm is used to perform signature verification on the second hash value to be verified and the post-quantum signature value to be verified to obtain a post-quantum signature verification result. The recipient performs two different hash operations on the plaintext of the message to be verified to obtain a post-quantum signature verification result.

[0128] The following is a corresponding explanation of the post-quantum cryptography and national secret algorithm hybrid signature device, post-quantum cryptography and national secret algorithm hybrid signature verification device, sender device and receiver device provided by any of the above embodiments of the present application. Its specific implementation process and the technical effects produced are the same as those of the corresponding method embodiments mentioned above. For the sake of brief description, the parts not mentioned in this embodiment can refer to the corresponding content in the method embodiment.

[0129] Figure 8 A functional module diagram of a hybrid signature device of post-quantum cryptography and national secret algorithm provided in an embodiment of the present application. Applied to the sender, such as Figure 8 As shown, the post-quantum cryptography and national secret algorithm hybrid signature device 100 includes:

[0130] The first hash operation module 110 is used to use a preset national secret hash algorithm to perform a hash operation on the plaintext of the signature message to obtain a first hash value;

[0131] The signature module 120 is used to perform a hybrid signature operation on the first hash value and the plaintext of the message to be signed according to the national secret signature private key component and the post-quantum signature private key component in the hybrid signature private key of the sender to obtain a national secret signature value and a post-quantum signature value, wherein the national secret signature private key component is a signature private key component obtained in advance using a national secret key algorithm;

[0132] The encapsulation module 130 is used to encapsulate the national secret signature value and the post-quantum signature value to obtain a mixed signature value corresponding to the plaintext of the message to be signed;

[0133] The sending module 140 is used to send the mixed signature value and the plain text of the message to be signed to the recipient.

[0134] Optionally, the signature module 120 is further used to perform a signature operation on the first hash value according to the national secret signature private key component, using a national secret signature algorithm corresponding to the national secret key algorithm to obtain a national secret signature value; and perform a signature operation on the national secret signature value and the plaintext of the message to be signed according to the post-quantum signature private key component, using a post-quantum signature algorithm to obtain a post-quantum signature value.

[0135] Optionally, the signature module 120 is further used to use a preset national secret hash algorithm to perform a hash operation on the national secret signature value and the plaintext of the message to be signed to obtain a second hash value; and use a post-quantum signature algorithm to perform a signature operation on the second hash value according to the post-quantum signature private key component to obtain a post-quantum signature value.

[0136] Optionally, the device further comprises:

[0137] A generation module is used to call the national secret key algorithm to generate a key pair interface to generate a national secret signature key pair. The national secret signature key pair includes: a national secret signature private key component and a national secret signature public key component;

[0138] The generation module is also used to call the post-quantum signature algorithm to generate a key pair interface to generate a post-quantum signature key pair, the post-quantum signature key pair including: a post-quantum signature private key component and a post-quantum signature public key component;

[0139] The encapsulation module 130 is also used to encapsulate the national secret signature private key component and the post-quantum signature private key component to obtain a hybrid signature private key;

[0140] The encapsulation module 130 is also used to encapsulate the national secret signature public key component and the post-quantum signature public key component to obtain a hybrid signature public key and make it public.

[0141] Fig. 9 A functional module diagram of a post-quantum cryptography and national secret algorithm hybrid signature verification device provided in an embodiment of the present application. Applied to the receiving party, such as Fig. 9 As shown, the post-quantum cryptography and national secret algorithm hybrid signature verification device 200 includes:

[0142] The receiving module 210 is used to receive the mixed signature value to be verified and the plain text of the message to be verified sent by the sender; the mixed signature value to be verified is the signature value obtained by the sender using the sender's mixed signature private key to perform a mixed signature on the plain text of the message to be verified;

[0143] The acquisition module 220 is used to obtain the sender's hybrid signature public key;

[0144] The decapsulation module 230 is used to decapsulate the mixed signature value to be verified to obtain the national secret signature value to be verified and the post-quantum signature value to be verified;

[0145] The second hash operation module 240 is used to use a preset national secret hash algorithm to perform a hash operation on the plaintext of the message to be verified to obtain a first hash value to be verified;

[0146] The signature verification module 250 is used to perform signature verification on the first hash value to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified according to the national secret signature public key component and the post-quantum signature public key component in the hybrid signature public key, and obtain the national secret signature verification result and the post-quantum signature verification result, wherein the national secret signature public key component is a signature public key component obtained in advance using the national secret key algorithm;

[0147] The determination module 260 is used to determine the verification result corresponding to the plaintext of the message to be verified according to the national secret signature verification result and the post-quantum signature verification result.

[0148] Optionally, the signature verification module 250 is further used to perform signature verification on the first hash value to be verified and the national secret signature value to be verified according to the national secret signature public key component, using a national secret signature verification algorithm corresponding to the national secret key algorithm to obtain a national secret signature verification result; and perform signature verification on the plaintext of the message to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified according to the post-quantum signature public key component, using a post-quantum signature verification algorithm to obtain a post-quantum signature verification result.

[0149] Optionally, the signature verification module 250 is further used to use a preset national secret hash algorithm to perform a hash operation on the national secret signature value to be verified and the message plaintext to be verified to obtain a second hash value to be verified; and use a post-quantum signature verification algorithm to perform signature verification on the second hash value to be verified and the post-quantum signature value to be verified according to the post-quantum signature public key component to obtain a post-quantum signature verification result.

[0150] Optionally, the determination module 260 is also used to determine that the verification result corresponding to the plaintext of the message to be verified is a successful verification if both the national secret signature verification result and the post-quantum signature verification result are successful verification; if the national secret signature verification result and / or the post-quantum signature verification result are failed verification, then determine that the verification result corresponding to the plaintext of the message to be verified is a failed verification.

[0151] The above-mentioned device is used to execute the method provided by the aforementioned embodiment, and its implementation principle and technical effect are similar, which will not be repeated here.

[0152] The above modules may be one or more integrated circuits configured to implement the above methods, such as one or more application specific integrated circuits (ASICs), or one or more microprocessors, or one or more field programmable gate arrays (FPGAs). For another example, when a module is implemented in the form of a processing element scheduling program code, the processing element may be a general-purpose processor, such as a central processing unit (CPU) or other processor that can call program code. For another example, these modules may be integrated together and implemented in the form of a system-on-a-chip (SOC).

[0153] Fig.10 A schematic diagram of a sending device provided in an embodiment of the present application, which can be used for hybrid signatures of post-quantum cryptography and national secret algorithms. Fig.10 As shown, the sending device includes: a processor 310 , a storage medium 320 , and a bus 330 .

[0154] The storage medium 320 stores machine-readable instructions executable by the processor 310. When the sending device is running, the processor 310 communicates with the storage medium 320 via the bus 330, and the processor 310 executes the machine-readable instructions to perform the steps of the above method embodiment. The specific implementation method and technical effect are similar and will not be repeated here.

[0155] Fig.11 A schematic diagram of a receiving device provided in an embodiment of the present application, which can be used for hybrid signature verification of post-quantum cryptography and national secret algorithm. Fig.11 As shown, the receiving device includes: a processor 410 , a storage medium 420 , and a bus 430 .

[0156] The storage medium 420 stores machine-readable instructions executable by the processor 410. When the receiving device is running, the processor 410 communicates with the storage medium 420 via the bus 430, and the processor 410 executes the machine-readable instructions to perform the steps of the above method embodiment. The specific implementation method and technical effect are similar and will not be repeated here.

[0157] Optionally, the present application further provides a storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above method embodiment are executed. The specific implementation method and technical effect are similar and will not be repeated here.

[0158] In the several embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0159] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0160] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0161] The above-mentioned integrated unit implemented in the form of a software functional unit can be stored in a computer-readable storage medium. The above-mentioned software functional unit is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor (English: processor) to perform some steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (English: Read-Only Memory, abbreviated: ROM), random access memory (English: Random Access Memory, abbreviated: RAM), disk or optical disk and other media that can store program codes.

[0162] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art who is familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A hybrid signature method of post-quantum cryptography and national secret algorithm, characterized in that: Applied to the sender, the method includes: Use the preset national secret hash algorithm to perform a hash operation on the plaintext of the signature message to obtain a first hash value; According to the national secret signature private key component and the post-quantum signature private key component in the hybrid signature private key of the sender, a hybrid signature operation is performed on the first hash value and the plaintext of the message to be signed to obtain a national secret signature value and a post-quantum signature value, wherein the national secret signature private key component is a signature private key component obtained in advance using a national secret key algorithm; Encapsulating the national secret signature value and the post-quantum signature value to obtain a mixed signature value corresponding to the plaintext of the message to be signed; Send the mixed signature value and the plaintext of the message to be signed to a recipient.

2. The method according to claim 1, characterized in that: The step of performing a hybrid signature operation on the first hash value and the plaintext of the message to be signed according to the national secret signature private key component and the post-quantum signature private key component in the hybrid signature private key of the sender to obtain a national secret signature value and a post-quantum signature value includes: According to the national secret signature private key component, the national secret signature algorithm corresponding to the national secret key algorithm is used to perform a signature operation on the first hash value to obtain the national secret signature value; According to the post-quantum signature private key component, a post-quantum signature algorithm is used to perform a signature operation on the national secret signature value and the plaintext of the message to be signed to obtain the post-quantum signature value.

3. The method according to claim 1, characterized in that The method of performing a signature operation on the national secret signature value and the plaintext of the message to be signed using a post-quantum signature algorithm according to the post-quantum signature private key component to obtain the post-quantum signature value includes: Using the preset national secret hash algorithm, a hash operation is performed on the national secret signature value and the plaintext of the message to be signed to obtain a second hash value; According to the post-quantum signature private key component, the post-quantum signature algorithm is used to perform a signature operation on the second hash value to obtain the post-quantum signature value.

4. The method according to claim 1, characterized in that: The method further comprises: Call the national secret key algorithm to generate a key pair interface to generate a national secret signature key pair, the national secret signature key pair includes: the national secret signature private key component and the national secret signature public key component; Calling the post-quantum signature algorithm to generate a key pair interface to generate a post-quantum signature key pair, the post-quantum signature key pair comprising: the post-quantum signature private key component and the post-quantum signature public key component; Encapsulating the national secret signature private key component and the post-quantum signature private key component to obtain the hybrid signature private key; The national secret signature public key component and the post-quantum signature public key component are encapsulated to obtain a hybrid signature public key, and the hybrid signature public key is made public.

5. A hybrid signature verification method of post-quantum cryptography and national secret algorithm, characterized in that: Applied to a receiving party, the method comprises: Receive the mixed signature value to be verified and the plain text of the message to be verified sent by the sender; the mixed signature value to be verified is the signature value obtained by the sender using the mixed signature private key of the sender to mix and sign the plain text of the message to be verified; Obtaining the sender's hybrid signature public key; Decapsulating the mixed signature value to be verified to obtain the national secret signature value to be verified and the post-quantum signature value to be verified; Using a preset national secret hash algorithm, a hash operation is performed on the plaintext of the message to be verified to obtain a first hash value to be verified; According to the national secret signature public key component and the post-quantum signature public key component in the hybrid signature public key, the first hash value to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified are signed and verified to obtain a national secret signature verification result and a post-quantum signature verification result, wherein the national secret signature public key component is a signature public key component obtained in advance using a national secret key algorithm; According to the national secret signature verification result and the post-quantum signature verification result, the verification result corresponding to the plaintext of the message to be verified is determined.

6. The method according to claim 5, characterized in that The method of performing signature verification on the first hash value to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified according to the national secret signature public key component and the post-quantum signature public key component in the hybrid signature public key, and obtaining the national secret signature verification result and the post-quantum signature verification result, includes: According to the national secret signature public key component, the national secret signature verification algorithm corresponding to the national secret key algorithm is used to perform signature verification on the first hash value to be verified and the national secret signature value to be verified to obtain the national secret signature verification result; According to the post-quantum signature public key component, a post-quantum signature verification algorithm is used to perform signature verification on the message plaintext to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified to obtain the post-quantum signature verification result.

7. The method according to claim 6, characterized in that The method of performing signature verification on the plaintext of the message to be verified, the national secret signature value to be verified, and the post-quantum signature value to be verified using a post-quantum signature verification algorithm according to the post-quantum signature public key component to obtain the post-quantum signature verification result includes: Using a preset national secret hash algorithm, a hash operation is performed on the national secret signature value to be verified and the plain text of the message to be verified to obtain a second hash value to be verified; According to the post-quantum signature public key component, a post-quantum signature verification algorithm is used to perform signature verification on the second hash value to be verified and the post-quantum signature value to be verified to obtain the post-quantum signature verification result.

8. The method according to claim 5, characterized in that Determining the verification result corresponding to the plaintext of the message to be verified according to the national secret signature verification result and the post-quantum signature verification result includes: If both the national secret signature verification result and the post-quantum signature verification result are successful, then determining that the verification result corresponding to the plaintext of the message to be verified is successful; If the national secret signature verification result and / or the post-quantum signature verification result is a verification failure, then it is determined that the verification result corresponding to the plaintext of the message to be verified is a verification failure.

9. A sending device, characterized in that: include: A processor, a storage medium and a bus, wherein the storage medium stores program instructions executable by the processor. When the sending device is running, the processor and the storage medium communicate through the bus, and the processor executes the program instructions to perform the steps of the hybrid signature method of post-quantum cryptography and national secret algorithm as described in any one of claims 1 to 4.

10. A receiving device, characterized in that: include: A processor, a storage medium and a bus, wherein the storage medium stores program instructions executable by the processor. When the receiving device is running, the processor and the storage medium communicate through the bus, and the processor executes the program instructions to perform the steps of the post-quantum cryptography and national secret algorithm hybrid signature verification method as described in any one of claims 5 to 8.

Images