Post-quantum TLCP protocol design method, device, equipment and medium

Abstract

The invention discloses a post-quantum TLCP protocol design method, device, equipment and medium, and relates to the field of information security, the post-quantum TLCP protocol design method is applied to a client, and the post-quantum TLCP protocol design method comprises the following steps: constructing client handshake information based on an information security technology transport layer cryptographic protocol, and sending the client handshake information to a server to receive returned server handshake information and establish connection; receiving a server-side digital certificate constructed based on the cryptographic algorithm encrypted public key information and the post-quantum key encapsulation algorithm public key information of the server-side and server-side key exchange information constructed based on the post-quantum key encapsulation algorithm and the cryptographic algorithm; and performing identity authentication based on the post-quantum digital signature algorithm public key information and the national cryptographic algorithm signature public key information to construct a pre-master key for data transmission. An active public key cryptographic algorithm and functions are reserved in an information security technology transport layer cryptographic protocol, and a post-quantum public key cryptographic algorithm is put into the protocol, so that the quantum security is realized while the active public key cryptographic security is realized.

Description

Technical Field

[0001] The present invention relates to the field of information security, and in particular to a post-quantum TLCP protocol design method, device, equipment and medium. Background Art

[0002] With the development of quantum computing technology, the security of existing public key cryptographic algorithms has been seriously challenged, especially cryptographic algorithms designed based on large integer factorization and discrete logarithm problems, such as RSA (an asymmetric encryption algorithm), ECC (Elliptic curve cryptography), SM2, SM9, etc. In order to solve this potential problem, cryptographers have developed a group of cryptographic algorithms that can resist quantum computing attacks, called post-quantum public key cryptographic algorithms, to replace the existing public key cryptographic algorithms. However, due to their short application time, these algorithms are not very mature. Therefore, the mixed use of existing public key cryptographic algorithms and post-quantum public key cryptographic algorithms is the current mainstream usage, such as in cryptographic protocols.

[0003] Cryptographic protocol refers to the communication format and steps agreed upon by the two communicating parties to complete activities related to cryptographic communication, such as key transfer, data transfer, or exchange of status information and control information, as well as the prescribed cryptographic operation methods and key data used. The TLCP (Transport Layer Cryptography Protocol) protocol is based on the national secret algorithms SM2, SM9, SM3 and SM4, and provides cryptographic functions such as confidentiality, data integrity and entity identity authentication for two applications. The TLCP protocol includes the record layer protocol and the handshake protocol family, among which the handshake protocol family includes the cryptographic specification change protocol, the alarm protocol and the handshake protocol, which is used by both parties to negotiate security parameters for the record layer, perform identity authentication and report errors.

[0004] However, the handshake protocol uses SM2 and SM9 algorithms for key exchange and identity authentication, and these two algorithms have serious security risks in the quantum computing environment. Therefore, it is necessary to use post-quantum public key cryptography algorithms to enhance quantum security. However, compared with SM2 and SM9 algorithms, post-quantum public key cryptography algorithms are characterized by large public and private key sizes, large ciphertext sizes and signature result sizes, single cryptographic operation functions, and many types of algorithms. The size problem is easy to solve because the TLCP protocol uses the TCP (Transmission Control Protocol) network protocol for data transmission, and the maximum data packet size is 64K bytes (if encryption padding and compression are considered, the maximum data packet is 2^14 bytes). As long as the cryptographic parameters of the post-quantum public key cryptography algorithm meet this restriction, the corresponding post-quantum public key cryptography algorithm can be placed in the protocol. However, the post-quantum public key cryptography algorithm has a single function and many types of algorithms. After being placed in the TLCP protocol, it is easy to cause problems in compatibility, scalability, and ease of use. Although the current international TLSv1.3 protocol has attempted to integrate the post-quantum public key cryptography design, and spliced ​​the relevant parameters of the post-quantum key encapsulation algorithm with the current public key cryptography parameters, and placed them in the KeyShareEntry structure, thereby realizing the hybrid of two or more algorithm functions of the current public key algorithm and the post-quantum public key algorithm, due to the large differences between the international TLSv1.3 protocol and the TLCP protocol, when conducting the post-quantum public key cryptography integration design, the extension is mainly used to encapsulate the post-quantum algorithm cryptographic parameters, and only the key exchange function is considered, and the identity authentication function is not considered. Therefore, how to more effectively improve the TLCP protocol to achieve identity authentication through the post-quantum public key cryptography algorithm is a problem to be solved in this field. Summary of the invention

[0005] In view of this, the purpose of the present invention is to provide a post-quantum TLCP protocol design method, device, equipment and medium, retain the current public key cryptographic algorithm and function in the information security technology transport layer cryptographic protocol, and place the post-quantum public key cryptographic algorithm into the protocol, so as to achieve quantum security while having the security of the current public key cryptography. The specific scheme is as follows:

[0006] In a first aspect, the present application provides a post-quantum TLCP protocol design method, which is applied to a client of a transport layer cryptographic protocol, including:

[0007] Constructing client handshake information according to a preset cryptographic suite based on the transport layer cryptographic protocol, and sending the client handshake information to a corresponding server, so as to receive server handshake information based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on the SM2 encryption algorithm and a post-quantum key encapsulation algorithm or a second cryptographic suite constructed based on the SM2 key agreement algorithm and a twice post-quantum key encapsulation algorithm;

[0008] Receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on the public key information encrypted by the national secret algorithm and the public key information of the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm;

[0009] After the key exchange is completed, the identity of itself and the server is authenticated based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so that data between itself and the server is transmitted according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0010] Optionally, constructing the client handshake information based on the transport layer cryptographic protocol according to a preset cryptographic suite includes:

[0011] The post-quantum key encapsulation algorithm public key information corresponding to the preset cryptographic suite is added to the extended key sharing entry of the extended item of the handshake information of the transport layer cryptographic protocol to construct the client handshake information; the post-quantum key encapsulation algorithm public key information is the post-quantum key encapsulation public key or post-quantum key encapsulation public key certificate of the preset cryptographic suite.

[0012] Optionally, the exchanging keys between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol includes:

[0013] If the preset cipher suite is the first cipher suite, constructing first client key exchange information based on the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm ciphertext; the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm ciphertext are respectively ciphertexts obtained by encrypting a first random number pair pre-generated by itself according to the post-quantum key encapsulation algorithm public key information and the national secret algorithm public key information;

[0014] The first client key exchange information is sent to the server, and based on the transport layer cryptographic protocol, a key exchange is performed between itself and the server according to the server digital certificate, the server key exchange information and the first client key exchange information.

[0015] Optionally, the identity authentication of the server and itself based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information includes:

[0016] Generate a first post-quantum algorithm signature and a first national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information respectively according to the server digital certificate, and verify the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the first post-quantum algorithm signature, the first national secret algorithm signature and the server key exchange information;

[0017] If both the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are successfully verified, it is determined that the identity authentication between itself and the server is successful.

[0018] Optionally, after receiving the server digital certificate and server key exchange information sent by the server, the method further includes:

[0019] If the preset cryptographic suite is the second cryptographic suite, the digital certificate and the digital certificate request for authenticating the client identity sent by the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are received, and after receiving the digital certificate request, a digital certificate is constructed based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, and the client digital certificate is sent to the server.

[0020] Optionally, the exchanging keys between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol includes:

[0021] Constructing second client key exchange information based on the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm key negotiation parameter; the post-quantum key encapsulation algorithm ciphertext is the ciphertext obtained by encrypting the second random number temporarily generated by itself according to the post-quantum key encapsulation algorithm public key information;

[0022] The second client key exchange information is sent to the server, and based on the transport layer cryptographic protocol, a key exchange is performed between itself and the server according to the server digital certificate, the client digital certificate, the server key exchange information and the second client key exchange information.

[0023] Optionally, the identity authentication of the server and itself based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information includes:

[0024] Generate a second post-quantum algorithm signature and a second national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information respectively according to the server digital certificate, and perform a first verification on the client side based on the second post-quantum algorithm signature, the second national secret algorithm signature and the server key exchange information on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information;

[0025] Generate a corresponding message digest based on all messages sent to the server by itself, and sign the message digest according to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, respectively, to obtain the corresponding third post-quantum algorithm signature and third national secret algorithm signature, so that the server can perform secondary verification on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the third post-quantum algorithm signature and the third national secret algorithm signature;

[0026] If the first verification and the second verification of the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are both successful, it is determined that the identity authentication between itself and the server is successful.

[0027] In a second aspect, the present application provides a post-quantum TLCP protocol design device, which is applied to a client of a transport layer cryptographic protocol, including:

[0028] An information sending module, used to construct client handshake information according to a preset cryptographic suite based on the transport layer cryptographic protocol, and send the client handshake information to a corresponding server, so as to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on an SM2 encryption algorithm and a post-quantum key encapsulation algorithm or a second cryptographic suite constructed based on an SM2 key agreement algorithm and a twice post-quantum key encapsulation algorithm;

[0029] A key exchange module is used to receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on the public key information encrypted by the national secret algorithm and the public key information of the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm;

[0030] The identity authentication module is used to perform identity authentication between itself and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information after the key exchange is completed, so as to perform data transmission between itself and the server according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0031] In a third aspect, the present application provides an electronic device, comprising a processor and a memory; wherein the memory is used to store a computer program, and the computer program is loaded and executed by the processor to implement the aforementioned post-quantum TLCP protocol design method.

[0032] In a fourth aspect, the present application provides a computer-readable storage medium for storing a computer program, which, when executed by a processor, implements the aforementioned post-quantum TLCP protocol design method.

[0033] In the present application, first, the client handshake information can be constructed according to the preset cryptographic suite based on the transport layer cryptographic protocol, and the client handshake information can be sent to the corresponding server to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and a connection between the server and the server is established. Then, the server digital certificate and server key exchange information sent by the server are received, and the key exchange between itself and the server is performed based on the transport layer cryptographic protocol according to the server digital certificate and the server key exchange information. After the key exchange is completed, the identity of itself and the server is authenticated based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so as to perform data transmission between itself and the server according to the pre-master key based on the obtained identity authentication result. Through the above technical scheme, this application modifies the handshake protocol of the transport layer cryptographic protocol (TLCP), uses the post-quantum public key cryptographic algorithm to ensure the quantum security of the protocol, and designs a post-quantum cryptographic algorithm suite to implement the relevant cryptographic functions of the quantum-resistant TLCP protocol, and completes the key exchange function by using the post-quantum key encapsulation algorithm and the SM2 algorithm, and uses the post-quantum digital signature algorithm and the SM2 algorithm to implement the identity authentication function, thereby adopting a fusion design strategy to retain the current public key cryptographic algorithm and related cryptographic functions while adding the post-quantum public key cryptographic algorithm function, so that the TLCP protocol can achieve quantum security while having the security of the current public key cryptography. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0035] Figure 1 A flow chart of a post-quantum TLCP protocol design method provided in this application;

[0036] Figure 2 A schematic diagram of TLCP protocol message changes provided by this application;

[0037] Figure 3 A specific cryptographic suite handshake interaction process and cryptographic operation function diagram provided for this application;

[0038] Figure 4 Another specific cryptographic suite handshake interaction process and cryptographic operation function diagram provided for this application;

[0039] Figure 5 A flow chart of a specific post-quantum TLCP protocol design method provided for this application;

[0040] Figure 6 A schematic diagram of the structure of a post-quantum TLCP protocol design device provided in this application;

[0041] Figure 7 A structural diagram of an electronic device provided for this application. DETAILED DESCRIPTION

[0042] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0043] The TLCP protocol can provide a variety of cryptographic functions for two applications with the national secret algorithm. Among them, the handshake protocol has serious security risks in key exchange and identity authentication in the quantum computing environment. It is necessary to use the post-quantum public key cryptographic algorithm to enhance quantum security. However, after the post-quantum algorithm is placed in the TLCP protocol, it is easy to cause compatibility, scalability and other problems. This application designs a post-quantum cryptographic algorithm suite, modifies the handshake protocol of the TLCP protocol, implements the relevant cryptographic functions of the quantum-resistant TLCP protocol, and completes the key exchange function by using the post-quantum key encapsulation algorithm and the SM2 algorithm, and uses the post-quantum digital signature algorithm and the SM2 algorithm to implement the identity authentication function, thereby realizing the TLCP protocol while having the security of the current public key cryptography and achieving quantum security.

[0044] See also Figure 1 As shown, an embodiment of the present invention discloses a post-quantum TLCP protocol design method, which is applied to a client of a transport layer cryptographic protocol, including:

[0045] Step S11: construct client handshake information based on the transport layer cryptographic protocol according to the preset cryptographic suite, and send the client handshake information to the corresponding server, so as to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on the SM2 encryption algorithm and the post-quantum key encapsulation algorithm, or a second cryptographic suite constructed based on the SM2 key agreement algorithm and the twice post-quantum key encapsulation algorithm.

[0046] It should be pointed out that the TLCP protocol obtained based on the post-quantum TLCP protocol design method in this embodiment is mainly used for secure communication between the client and server of the protocol, and both the client and the server need to communicate data based on the post-quantum TLCP protocol in this embodiment. Specifically, in this embodiment, the client handshake information can be first constructed based on the TLCP protocol according to the preset password suite, and the client handshake information can be sent to the corresponding server, so as to receive the server handshake information based on the preset password suite returned by the server, and establish a connection between the server and the server. Among them, the above-mentioned preset password suite is a first password suite constructed based on elliptic curve cryptography (ECC) or a second password suite constructed based on a key exchange algorithm (ECDHE, Elliptic Curve Diffie Hellman Ephemeral, a key exchange mechanism based on elliptic curves).

[0047] Among them, regarding the above-mentioned cryptographic suites, in this embodiment, considering that the TLCP protocol mainly supports two types of cryptographic algorithm suites, ECC_SM4_xxx_SM3 and ECDHE_SM4_xxx_SM3 (xxx can be CBC (Cipher Block Chaining, ciphertext block chaining), GCM (Galois / Counter Mode, symmetric algorithm mode), etc.), in order to add support for post-quantum public key cryptographic algorithms, in this embodiment, the two types of cryptographic algorithm suites, PQCKEM-ECC_SM4_xxx_SM3 and PQCKEM-ECDHE_SM4_xxx_SM3, are added to the quantum-resistant TLCP protocol. Among them, PQCKEM (Post-QuantumCryptography Key Encapsulation Mechanism, post-quantum key encapsulation algorithm) is a specific post-quantum key encapsulation algorithm, such as CRYSTALS-Kyber (if the domestic standardization of the post-quantum key encapsulation algorithm is completed, the domestic algorithm will be used). The specific algorithm parameters are specified in the protocol implementation, and identity authentication relies on a digital certificate that mixes the pre- and post-quantum algorithms (such as a mixture of the CRYSTALS-Dilithium algorithm and the SM2 algorithm). The original data is signed twice, one with the post-quantum signature algorithm and the other with the SM2 algorithm.

[0048] Specifically, the PQCKEM-ECC_SM4_xxx_SM3 cryptographic algorithm suite refers to the key exchange using a mixture of the post-quantum key encapsulation algorithm and the SM2 encryption and decryption algorithm. The post-quantum key encapsulation calculates the shared key as the key exchange material 1, and the SM2 encryption and decryption algorithm calculates the key exchange material 2. The two key materials are then XORed (when the lengths are different, the short data is padded with 0x0 to make them the same length and then XORed) to form a pre-master key. The symmetric encryption operation uses SM4_xxx, and the hash operation uses SM3. The corresponding identity authentication is a one-way authentication of the server. The authentication algorithm is a mixture of a certain post-quantum signature algorithm and the SM2 algorithm. The specific algorithm is specified in the digital certificate and is not specifically limited here. The PQCKEM-ECDHE_SM4_xxx_SM3 cryptographic algorithm suite means that the key exchange uses a mixture of two post-quantum key encapsulation algorithms and one SM2 key agreement algorithm. The post-quantum key encapsulation calculates two shared keys as key exchange material 1 and key exchange material 2. The SM2 key agreement algorithm calculates key exchange material 3, and then the three key materials are XORed (when the lengths are different, short data is padded with 0 to make them the same length and then XORed) to form a pre-master key. The symmetric encryption operation uses SM4_xxx and the hash operation uses SM3. Correspondingly, identity authentication is two-way authentication, and the authentication algorithm is a mixture of a post-quantum signature algorithm and the SM2 algorithm. The specific algorithm is specified in the digital certificate, and it can be understood that the server and the client can use different post-quantum signature algorithms. Through the above technical solution, based on the above cryptographic suite, only the post-quantum key encapsulation algorithm is specified in the cryptographic algorithm suite, and the specific algorithm parameters are not specified (for example, when using the CRYSTALS-Kyber algorithm, the specific algorithm parameters of 512 / 768 / 1024 are not specified), and it is decided by one party to the protocol at runtime. The identity authentication algorithm is not specified, but is determined by the signature certificates of both parties. When performing two-way identity authentication, the digital signature certificates of both parties can use different algorithms. In this way, when designing the extension items of the data packet structure, the algorithm identifier and value can be placed in the structure to support different algorithms and algorithm parameters, so as to enhance the adaptability of the quantum-resistant TLCP protocol to the post-quantum public key cryptographic algorithm.

[0049] And when constructing the client handshake information according to the preset cipher suite, the post-quantum key encapsulation algorithm public key information corresponding to the preset cipher suite can be added to the extended key sharing entry of the extended item of the initial handshake information of the information security technology transport layer cryptographic protocol to construct the client handshake information, wherein the post-quantum key encapsulation algorithm public key information is the post-quantum key encapsulation public key or post-quantum key encapsulation public key certificate of the preset cipher suite. That is to say, Figure 2As shown, in this embodiment, the message structure of the handshake phase of the anti-quantum TLCP protocol is adaptively modified. The main modified messages include ClientHello message, ServerCertificate message, ClientCertificate message, ServerKeyExchange message and ClientKeyExchange message. The specific modifications can be seen in Table 1 below. Among them, the bold font indicates that the Kangquan TLCP protocol in this embodiment is newly added or modified compared to the current TLCP protocol. In this way, the current public key cryptographic algorithm and function can be retained, and the post-quantum public key cryptographic algorithm is placed in the handshake protocol using a fusion design strategy, so that the protocol can achieve quantum security while having the security of the current public key cryptography. As shown in Table 1, the extension of the post-quantum cryptographic algorithm suite and the protocol data packet structure are used to support the post-quantum algorithm, and it is compatible with the protocol before the modification. After the modification, the protocol interaction process remains unchanged, and the data packet structure of the interactive message in the protocol is modified less. It supports switching the cryptographic algorithm suite at runtime, which improves the compatibility and dynamic switching capability of the anti-quantum TLCP protocol.

[0050] Table 1 Quantum-resistant TLCP protocol message changes

[0051]

[0052]

[0053]

[0054] Step S12, receiving the server digital certificate and server key exchange information sent by the server, and performing key exchange between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on the public key information encrypted based on the national secret algorithm and the public key information of the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm.

[0055] In this embodiment, after receiving the server digital certificate and server key exchange information sent by the server, the client can perform key exchange between itself and the server based on the TLCP protocol in the above steps according to the received server digital certificate and server key exchange information. It should be noted that the above server digital certificate is a digital certificate constructed by the server based on the post-quantum digital signature algorithm public key information, the national secret algorithm public key information and the post-quantum key encapsulation algorithm public key information in the handshake information. Correspondingly, the above server key exchange information is the key exchange information constructed by the server based on the signature generated by the post-quantum digital signature algorithm and the national secret algorithm.

[0056] It should be pointed out that in the quantum-resistant TLCP handshake protocol of this embodiment, the two types of cryptographic algorithm suite protocol interaction processes, PQCKEM-ECC_SM4_xxx_SM3 and PQCKEM-ECDHE_SM4_xxx_SM3, are the same as the original handshake protocol interaction processes, but the corresponding cryptographic function processes need to be modified, mainly including the negotiation of the cryptographic algorithm suite, the key exchange function to generate the pre-master key, and the use of the digital certificate of the hybrid algorithm for one-way or two-way identity authentication. In a specific embodiment, if the cryptographic algorithm suite used is PQCKEM-ECC_SM4_xxx_SM3, the interaction process is as follows: Figure 3 As shown, the solid-line box represents a message, the curly brackets in the message represent the values ​​of some variables in the message, the dotted-line box represents the cryptographic operation function, the identification string xxx represents the context definition and is not shown in the figure, pqckem_parameter represents a certain post-quantum key encapsulation algorithm public key parameter (it can be the original parameter of the public key information, or it can be a digital certificate containing the public key information. When it is a digital certificate, the signature algorithm is the same as the signature certificate, and it is signed by the private key that issues the signature certificate), pqc_sign and pqc_verify represent the use of a certain post-quantum signature algorithm for signing and verification operations, pqckem_pack and pqckem_depack represent the use of a certain post-quantum key encapsulation algorithm for key encapsulation and decapsulation operations, ... represents omitted data, which is the same as the original protocol. In another specific embodiment, if the cryptographic algorithm suite used is PQCKEM-ECDHE_SM4_xxx_SM3, the interaction process is as follows: Figure 4 As shown, the meaning of each mark is Figure 3 The same is not repeated here. sm2_dhkey represents the relevant parameters of sm2 key negotiation, and sm2_dh represents sm2 key negotiation operation.

[0057] Step S13: After the key exchange is completed, the identity of itself and the server is authenticated based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so as to transmit data between itself and the server according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0058] In this embodiment, after the key exchange is completed, the client can authenticate itself and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm public key information, so as to transmit data between itself and the server based on the obtained identity authentication result and the pre-master key. It should be pointed out that the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0059] Through the above technical solution, the interaction process between the national secret algorithm and the original protocol is retained in this embodiment, so that the national secret SM2, SM9 algorithm and related functions are retained through the quantum attack-resistant TLCP protocol. In this way, even if the security of the post-quantum public key cryptographic algorithm is damaged, the national secret SM2 and SM9 algorithms can still ensure the security of the protocol in a classical computing environment. In addition, the post-quantum key encapsulation algorithm and the post-quantum digital signature algorithm are also placed in this embodiment, and the protocol cryptographic algorithm suite and the data packet structure of the interactive message are expanded to achieve the quantum security of the protocol. At the same time, due to the use of the extension of the post-quantum cryptographic algorithm suite and the protocol data packet structure to support the post-quantum algorithm and be compatible with the protocol before the modification, the compatibility and dynamic negotiation switching of the protocol are guaranteed, and when performing key exchange and identity authentication, the TLCP protocol is not strongly bound to the specific post-quantum algorithm, but a more flexible design strategy should be adopted, which is helpful to enhance the adaptive ability of the protocol.

[0060] Based on the previous embodiment, it can be seen that the present application can complete the key exchange function by using the post-quantum key encapsulation algorithm and the SM2 algorithm, and use the post-quantum digital signature algorithm and the SM2 algorithm to realize the identity authentication function. Next, the above identity authentication process will be described in detail in this embodiment. Figure 5 As shown, the embodiment of the present application discloses a post-quantum TLCP protocol design method, which is applied to the client of the transport layer cryptographic protocol, including:

[0061] Step S21, receiving the server digital certificate and server key exchange information sent by the server, and performing key exchange between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on the public key information encrypted based on the national secret algorithm and the public key information of the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm.

[0062] In this embodiment, when exchanging keys between the client and the server,

[0063] In a specific embodiment, if the cryptographic algorithm suite adopted is PQCKEM-ECC_SM4_xxx_SM3, i.e., the first cryptographic suite, the first client key exchange information is constructed based on the post-quantum key encapsulation algorithm public key ciphertext and the national secret algorithm ciphertext, and then the first client key exchange information is sent to the server, and the key exchange between itself and the server is performed based on the information security technology transport layer cryptographic protocol according to the server digital certificate, the server key exchange information and the first client key exchange information. Among them, the above-mentioned post-quantum key encapsulation algorithm public key ciphertext and the national secret algorithm ciphertext are the ciphertexts obtained by encrypting the first random number pre-generated by itself according to the post-quantum key encapsulation algorithm public key information and the national secret algorithm public key information respectively. Figure 3 As shown in the figure, when exchanging cryptographic algorithm suites, the client adds the cryptographic suite PQCKEM-ECC_xxx (i.e., PQCKEM-ECC_SM4_xxx_SM3) of the post-quantum key encapsulation algorithm and the ECC algorithm in the ClientHello message, and the server can select the suite in the ServerHello message. Correspondingly, during key exchange, the server can combine the public key information of the post-quantum key encapsulation algorithm and the SM2 certificate information and transmit them to the client through the Certificate message. The client combines the post-quantum key encapsulation ciphertext and the SM2 encrypted ciphertext and transmits them to the server through the ClientKeyExchange message, performs two key exchanges, obtains the random numbers randA and randB key materials, and then performs an XOR operation on them to obtain the final pre-master key for subsequent data transmission between the client and the server.

[0064] In another specific embodiment, if the cryptographic algorithm suite adopted is PQCKEM-ECDHE_SM4_xxx_SM3, that is, the second cryptographic suite, after receiving the server digital certificate and server key exchange information sent by the server, the client can also receive a digital certificate request sent by the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm public key information, and after receiving the digital certificate request, construct its own client digital certificate based on the server digital certificate, and send the client digital certificate to the server. Afterwards, when exchanging keys between itself and the server, the second client key exchange information is constructed based on the post-quantum key encapsulation algorithm public key ciphertext and the national secret algorithm key negotiation parameters, and then the second client key exchange information is sent to the server, and the key exchange between itself and the server is performed based on the information security technology transport layer cryptographic protocol according to the server digital certificate, the client digital certificate, the server key exchange information and the second client key exchange information. Among them, the above-mentioned post-quantum key encapsulation algorithm public key ciphertext is the ciphertext obtained by encrypting the second random number pre-generated by itself according to the post-quantum key encapsulation algorithm public key information. As Figure 4 As shown, when exchanging cipher suites, the client adds the cipher suite PQCKEM-ECDHE_xxx (i.e., PQCKEM-ECDHE_SM4_xxx_SM3) of the post-quantum key encapsulation algorithm and the ECDHE algorithm in the ClientHello message, and the server selects the suite in the ServerHello message. After that, the key exchange is performed. The client first transmits its post-quantum key encapsulated public key information to the server through the ClientHello message, and the server transmits its post-quantum key encapsulated public key information and SM2 encryption certificate to the client through the ServerCertificate message. The client transmits its own SM2 encryption certificate to the server through the ClientCertficate message. After that, the server can use the client's post-quantum key encapsulation public key to encapsulate the random key material randA, and the client uses the server's post-quantum key encapsulation public key to encapsulate the random key material randB, and then use the SM2 key negotiation algorithm to negotiate the random key material randC, and then XOR the three random numbers to obtain the pre-master key.

[0065] Step S22: After the key exchange is completed, the identity of itself and the server is authenticated based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so that the data between itself and the server is transmitted according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0066] In a specific embodiment, if the cryptographic algorithm suite adopted is PQCKEM-ECC_SM4_xxx_SM3, i.e., the first cryptographic suite, when performing identity authentication between itself and the server, the first post-quantum algorithm signature and the first national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm public key information can be generated according to the server digital certificate, and the post-quantum digital signature algorithm public key information and the national secret algorithm public key information are verified based on the first post-quantum algorithm signature, the first national secret algorithm signature and the server key exchange information. If the post-quantum digital signature algorithm public key information and the national secret algorithm public key information are both successfully verified, it is determined that the identity authentication between itself and the server is passed. That is to say, after the server transmits the certificate (hybrid algorithm digital certificate) containing the post-quantum digital signature public key information and the SM2 public key information to the client through the Certificate message, it then makes a post-quantum signature and an SM2 signature for the post-quantum key encapsulation public key and other information, and transmits the signature result to the client by attaching it to the ServerKeyExchange message. The client uses the certificate and the signature result to verify the post-quantum signature and the SM2 signature respectively. Only when both signatures are verified, the server identity authentication is considered to be successful.

[0067] In another specific embodiment, if the cryptographic algorithm suite adopted is PQCKEM-ECDHE_SM4_xxx_SM3, that is, the second cryptographic suite, the second post-quantum algorithm signature and the second national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm public key information can be generated according to the server digital certificate, and the post-quantum digital signature algorithm public key information and the national secret algorithm public key information are first verified based on the second post-quantum algorithm signature, the second national secret algorithm signature and the server key exchange information; then, a corresponding message digest is generated based on all messages sent to the server by itself, and the message digest is signed according to the post-quantum digital signature algorithm public key information and the national secret algorithm public key information, respectively, to obtain the corresponding third post-quantum algorithm signature and the third national secret algorithm signature, and the post-quantum digital signature algorithm public key information and the national secret algorithm public key information are secondarily verified based on the third post-quantum algorithm signature and the third national secret algorithm signature. If the first verification and the second verification of the post-quantum digital signature algorithm public key information and the national secret algorithm public key information are both successful, it is determined that the identity authentication between itself and the server is passed. That is to say, the server can transmit the signature certificate (hybrid algorithm digital certificate) containing the post-quantum signature public key information and SM2 public key information to the client through the ServerCertificate message, and the client also transmits a similar signature certificate of its own to the server through the ClientCertficate message. After that, the server makes a post-quantum signature and SM2 signature on the post-quantum key encapsulation public key and other information, and attaches the signature result to the ServerKeyExchange message and transmits it to the client. The client verifies it, and the client makes a post-quantum signature and SM2 signature on all messages from the ClientHello message to the present after SM3 summary, and sends it to the server through the CertificateVerify message. The server verifies it. Only when all four verifications are passed can the identity authentication of both parties be considered successful.

[0068] Through the above technical solution, the cryptographic algorithm suite used by the quantum-resistant TLCP protocol in this embodiment only specifies one post-quantum key encapsulation algorithm, but does not specify specific algorithm parameters, nor does it specify the algorithm used for identity authentication, thereby reducing the number of cryptographic algorithm suites, and then using the extended item design and conditional options (switch-case structure) of the message structure to adapt to different cryptographic algorithm suites, so that the protocol has better compatibility, extensibility and adaptability.

[0069] See also Figure 6 As shown, the embodiment of the present application also discloses a post-quantum TLCP protocol design device, which is applied to the client of the transport layer cryptographic protocol, including:

[0070] An information sending module 11 is used to construct client handshake information based on the transport layer cryptographic protocol according to a preset cryptographic suite, and send the client handshake information to a corresponding server, so as to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on the SM2 encryption algorithm and a post-quantum key encapsulation algorithm or a second cryptographic suite constructed based on the SM2 key agreement algorithm and a twice post-quantum key encapsulation algorithm;

[0071] The key exchange module 12 is used to receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on the public key information encrypted by the national secret algorithm and the public key information of the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm;

[0072] The identity authentication module 13 is used to perform identity authentication between itself and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information after the key exchange is completed, so as to perform data transmission between itself and the server according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0073] This embodiment can construct client handshake information based on the preset cryptographic suite based on the transport layer cryptographic protocol, and send the client handshake information to the corresponding server to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection between the server and the server, and then receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server based on the transport layer cryptographic protocol according to the server digital certificate and the server key exchange information, and after the key exchange is completed, perform identity authentication of itself and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so as to perform data transmission between itself and the server based on the pre-master key based on the obtained identity authentication result. Through the above technical scheme, in this embodiment, the handshake protocol of the TLCP protocol is modified, and the post-quantum public key cryptographic algorithm is used to ensure the quantum security of the protocol, and a post-quantum cryptographic algorithm suite is designed to implement the relevant cryptographic functions of the quantum-resistant TLCP protocol, and the key exchange function is completed by using the post-quantum key encapsulation algorithm and the SM2 algorithm, and the identity authentication function is realized by using the post-quantum digital signature algorithm and the SM2 algorithm. In this way, while retaining the current public key cryptographic algorithm and related cryptographic functions, the post-quantum public key cryptographic algorithm function is added while adopting a fusion design strategy, so that the TLCP protocol can achieve quantum security while having the security of the current public key cryptography.

[0074] In some specific embodiments, the information sending module 11 specifically includes:

[0075] The first information construction unit is used to add the post-quantum key encapsulation algorithm public key information corresponding to the preset cryptographic suite to the extended key sharing entry of the extended item of the handshake information of the transport layer cryptographic protocol to construct the client handshake information; the post-quantum key encapsulation algorithm public key information is the post-quantum key encapsulation public key or post-quantum key encapsulation public key certificate of the preset cryptographic suite.

[0076] In some specific embodiments, the key exchange module 12 specifically includes:

[0077] A second information construction unit is configured to construct first client key exchange information based on a post-quantum key encapsulation algorithm ciphertext and a national secret algorithm ciphertext if the preset cipher suite is the first cipher suite; the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm ciphertext are ciphertexts obtained by encrypting a first random number pair pre-generated by the self according to the post-quantum key encapsulation algorithm public key information and the national secret algorithm public key information respectively;

[0078] The first key exchange unit is used to send the first client key exchange information to the server, and based on the transport layer cryptographic protocol, perform key exchange between itself and the server according to the server digital certificate, the server key exchange information and the first client key exchange information.

[0079] In some specific embodiments, the identity authentication module 13 specifically includes:

[0080] A signature generation unit, configured to generate a first post-quantum algorithm signature and a first national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information respectively according to the server digital certificate, and verify the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the first post-quantum algorithm signature, the first national secret algorithm signature and the server key exchange information;

[0081] The first identity authentication unit is used to determine that the identity authentication between itself and the server is successful if both the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are successfully verified.

[0082] In some specific embodiments, the identity authentication device further includes:

[0083] A certificate construction module is used to receive the digital certificate and the digital certificate request for authenticating the client identity sent by the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information if the preset cryptographic suite is the second cryptographic suite, and after receiving the digital certificate request, construct a digital certificate based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, and send the client digital certificate to the server.

[0084] In some specific embodiments, the key exchange module 12 specifically includes:

[0085] The third information construction unit is used to construct the second client key exchange information based on the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm key negotiation parameter; the post-quantum key encapsulation algorithm ciphertext is the ciphertext obtained by encrypting the second random number temporarily generated by itself according to the post-quantum key encapsulation algorithm public key information;

[0086] The second key exchange unit is used to send the second client key exchange information to the server, and based on the transport layer cryptographic protocol, perform key exchange between itself and the server according to the server digital certificate, the client digital certificate, the server key exchange information and the second client key exchange information.

[0087] In some specific embodiments, the identity authentication module 13 specifically includes:

[0088] A first information verification unit is used to generate a second post-quantum algorithm signature and a second national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information according to the server digital certificate, and perform a first verification on the client side based on the second post-quantum algorithm signature, the second national secret algorithm signature and the server key exchange information on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information;

[0089] A second information verification unit is used to generate a corresponding message digest based on all messages sent by itself to the server, and sign the message digest according to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, respectively, to obtain the corresponding third post-quantum algorithm signature and third national secret algorithm signature, so as to perform secondary verification on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the third post-quantum algorithm signature and the third national secret algorithm signature on the server;

[0090] The second identity authentication unit is used to determine that the identity authentication between itself and the server is successful if the first verification and the second verification of the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are both successful.

[0091] Furthermore, the present application also discloses an electronic device. Figure 7 This is a structural diagram of an electronic device 20 according to an exemplary embodiment. The content in the diagram cannot be regarded as any limitation on the scope of use of the present application.

[0092] Figure 7 The present invention provides a schematic diagram of the structure of an electronic device 20 provided in an embodiment of the present application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, which is loaded and executed by the processor 21 to implement the relevant steps in the identity authentication method disclosed in any of the above embodiments. In addition, the electronic device 20 in this embodiment may specifically be an electronic computer.

[0093] In this embodiment, the power supply 23 is used to provide working voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device, and the communication protocol it follows is any communication protocol that can be applied to the technical solution of the present application, and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world, and its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0094] In addition, the memory 22, as a carrier for storing resources, can be a read-only memory, a random access memory, a disk or an optical disk, etc. The resources stored thereon can include an operating system 221, a computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0095] The operating system 221 is used to manage and control the hardware devices and computer programs 222 on the electronic device 20, and can be Windows Server, Netware, Unix, Linux, etc. In addition to including a computer program that can be used to complete the identity authentication method performed by the electronic device 20 disclosed in any of the aforementioned embodiments, the computer program 222 can further include a computer program that can be used to complete other specific tasks.

[0096] Furthermore, the present application also discloses a computer-readable storage medium for storing a computer program; wherein the computer program, when executed by a processor, implements the aforementioned disclosed identity authentication method. The specific steps of the method can refer to the corresponding contents disclosed in the aforementioned embodiments, and will not be repeated here.

[0097] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0098] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0099] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0100] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0101] The technical solution provided by the present application is introduced in detail above. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for general technicians in this field, according to the idea of ​​the present application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A post-quantum TLCP protocol design method, characterized in that: Clients for transport layer cryptographic protocols, including: Constructing client handshake information according to a preset cryptographic suite based on the transport layer cryptographic protocol, and sending the client handshake information to a corresponding server, so as to receive server handshake information based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on the SM2 encryption algorithm and a post-quantum key encapsulation algorithm or a second cryptographic suite constructed based on the SM2 key agreement algorithm and a twice post-quantum key encapsulation algorithm; Receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on the public key information encrypted by the national secret algorithm and the public key information of the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm; After the key exchange is completed, the identity of itself and the server is authenticated based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so that data between itself and the server is transmitted according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

2. The post-quantum TLCP protocol design method according to claim 1, characterized in that: The constructing the client handshake information based on the transport layer cryptographic protocol according to the preset cryptographic suite includes: The post-quantum key encapsulation algorithm public key information corresponding to the preset cryptographic suite is added to the extended key sharing entry of the extended item of the handshake information of the transport layer cryptographic protocol to construct the client handshake information; the post-quantum key encapsulation algorithm public key information is the post-quantum key encapsulation public key or post-quantum key encapsulation public key certificate of the preset cryptographic suite.

3. The post-quantum TLCP protocol design method according to claim 1 or 2, characterized in that: The exchanging keys between itself and the server based on the transport layer cryptographic protocol according to the server digital certificate and the server key exchange information includes: If the preset cipher suite is the first cipher suite, constructing first client key exchange information based on the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm ciphertext; the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm ciphertext are respectively ciphertexts obtained by encrypting a first random number pair pre-generated by itself according to the post-quantum key encapsulation algorithm public key information and the national secret algorithm public key information; The first client key exchange information is sent to the server, and based on the transport layer cryptographic protocol, a key exchange is performed between itself and the server according to the server digital certificate, the server key exchange information and the first client key exchange information.

4. The post-quantum TLCP protocol design method according to claim 3, characterized in that: The identity authentication of the self and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information includes: Generate a first post-quantum algorithm signature and a first national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information respectively according to the server digital certificate, and verify the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the first post-quantum algorithm signature, the first national secret algorithm signature and the server key exchange information; If both the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are successfully verified, it is determined that the identity authentication between itself and the server is successful.

5. The post-quantum TLCP protocol design method according to claim 1 or 2, characterized in that: After receiving the server digital certificate and server key exchange information sent by the server, the method further includes: If the preset cryptographic suite is the second cryptographic suite, the digital certificate and the digital certificate request for authenticating the client identity sent by the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are received, and after receiving the digital certificate request, a digital certificate is constructed based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, and the client digital certificate is sent to the server.

6. The post-quantum TLCP protocol design method according to claim 5, characterized in that: The exchanging keys between itself and the server based on the transport layer cryptographic protocol according to the server digital certificate and the server key exchange information includes: Constructing second client key exchange information based on the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm key negotiation parameter; the post-quantum key encapsulation algorithm ciphertext is the ciphertext obtained by encrypting the second random number temporarily generated by itself according to the post-quantum key encapsulation algorithm public key information; The second client key exchange information is sent to the server, and based on the transport layer cryptographic protocol, a key exchange is performed between itself and the server according to the server digital certificate, the client digital certificate, the server key exchange information and the second client key exchange information.

7. The post-quantum TLCP protocol design method according to claim 6, characterized in that: The identity authentication of the self and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information includes: Generate a second post-quantum algorithm signature and a second national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information respectively according to the server digital certificate, and perform a first verification on the client side based on the second post-quantum algorithm signature, the second national secret algorithm signature and the server key exchange information on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information; Generate a corresponding message digest based on all messages sent to the server by itself, and sign the message digest according to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, respectively, to obtain the corresponding third post-quantum algorithm signature and third national secret algorithm signature, so that the server can perform secondary verification on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the third post-quantum algorithm signature and the third national secret algorithm signature; If the first verification and the second verification of the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are both successful, it is determined that the identity authentication between itself and the server is successful.

8. A post-quantum TLCP protocol design device, characterized in that: Clients for transport layer cryptographic protocols, including: An information sending module, used to construct client handshake information according to a preset cryptographic suite based on the transport layer cryptographic protocol, and send the client handshake information to a corresponding server, so as to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on an SM2 encryption algorithm and a post-quantum key encapsulation algorithm or a second cryptographic suite constructed based on an SM2 key agreement algorithm and a twice post-quantum key encapsulation algorithm; A key exchange module is used to receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on the public key information encrypted by the national secret algorithm and the public key information of the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm; The identity authentication module is used to perform identity authentication between itself and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information after the key exchange is completed, so as to perform data transmission between itself and the server according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

9. An electronic device, characterized in that: The electronic device includes a processor and a memory; wherein the memory is used to store a computer program, and the computer program is loaded and executed by the processor to implement the post-quantum TLCP protocol design method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: Used to store a computer program, which, when executed by a processor, implements the post-quantum TLCP protocol design method as described in any one of claims 1 to 7.

Images