A post-quantum TLCP protocol design method, device, equipment and medium

Abstract

This application discloses a post-quantum TLCP protocol design method, apparatus, device, and medium, which relates to the field of information security and is applied to the client, including: constructing a client handshake message based on the information security technology transport layer cryptographic protocol and sending it to the server to receive the returned server handshake message and establish a connection; receiving the server's digital certificate constructed based on the public key information encrypted by the national secret algorithm and the public key information of the post-quantum key encapsulation algorithm, as well as the server key exchange information constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm; performing identity authentication based on the public key information of the post-quantum digital signature algorithm and the public key information of the national secret algorithm signature to construct a pre-master key for data transmission. The current public key cryptographic algorithm and functions are retained in the information security technology transport layer cryptographic protocol, and the post-quantum public key cryptographic algorithm is incorporated into the protocol, thereby achieving quantum security while maintaining the security of the current public key cryptography.

Description

Technical Field

[0001] The present invention relates to the field of information security, and in particular to a post-quantum TLCP protocol design method, apparatus, device, and medium. Background Art

[0002] With the development of quantum computing technology, the security of existing public-key cryptographic algorithms has been seriously challenged, especially cryptographic algorithms designed based on large integer factorization and discrete logarithm problems, such as RSA (an asymmetric encryption algorithm), ECC (Elliptic curve cryptography), SM2, SM9, etc. In order to solve this potential problem, cryptographers have developed a group of cryptographic algorithms that can resist quantum computing attacks, called post-quantum public-key cryptographic algorithms, to replace existing public-key cryptographic algorithms. However, due to their short application time, these algorithms are not very mature. Therefore, the mixed use of existing public-key cryptographic algorithms and post-quantum public-key cryptographic algorithms is the current mainstream usage, such as in cryptographic protocols.

[0003] A cryptographic protocol refers to the communication format and procedures, as well as the prescribed cryptographic operations and key data used, agreed upon by two communicating parties to complete cryptographic communication-related activities such as key transfer, data transmission, or the exchange of status and control information. The Transport Layer Cryptography Protocol (TLCP), based on national cryptographic algorithms such as SM2, SM9, SM3, and SM4, provides cryptographic functions such as confidentiality, data integrity, and entity authentication between two applications. The TLCP protocol comprises the Record Layer Protocol and the Handshake Protocol Suite. The Handshake Protocol Suite includes the Cryptographic Specification Change Protocol, the Alarm Protocol, and the Handshake Protocol. It allows both parties to negotiate security parameters for use at the Record Layer, perform identity authentication, and report errors.

[0004] However, the handshake protocol uses the SM2 and SM9 algorithms for key exchange and identity authentication. These algorithms present serious security risks in quantum computing environments. Therefore, post-quantum public-key cryptography algorithms are needed to enhance quantum security. However, compared to SM2 and SM9, post-quantum public-key cryptography algorithms are characterized by larger public and private key sizes, larger ciphertext and signature sizes, limited cryptographic functionality, and a wide variety of algorithms. This size issue is easily addressed, as the TLCP protocol uses the TCP (Transmission Control Protocol) network protocol for data transmission, with a maximum packet size of 64 KB (up to 2^14 bytes if encryption padding and compression are considered). As long as the cryptographic parameters of the post-quantum public-key algorithm meet this limit, the corresponding post-quantum public-key cryptography algorithm can be incorporated into the protocol. However, the limited functionality and wide variety of post-quantum public-key cryptography algorithms can easily lead to compatibility, scalability, and usability issues when incorporated into the TLCP protocol. While the current international TLSv1.3 protocol attempts to integrate post-quantum public key cryptography, concatenating parameters related to the post-quantum key encapsulation algorithm with current public key cryptography parameters and placing them in the KeyShareEntry structure, thereby achieving the hybrid functionality of two or more algorithms, both current and post-quantum public key algorithms, due to significant differences between the international TLSv1.3 protocol and the TLCP protocol, the post-quantum public key cryptography integration design primarily uses extensions to encapsulate post-quantum algorithm cryptographic parameters. This design also only considers key exchange functionality, not identity authentication. Therefore, how to more effectively improve the TLCP protocol to achieve identity authentication through post-quantum public key cryptography remains an unresolved issue in this field. Summary of the Invention

[0005] In light of this, the present invention aims to provide a post-quantum TLCP protocol design method, apparatus, device, and medium. This method retains existing public-key cryptographic algorithms and functions within the information security technology transport layer cryptographic protocol and incorporates post-quantum public-key cryptographic algorithms into the protocol, thereby achieving quantum security while retaining the security of existing public-key cryptography. The specific implementation is as follows:

[0006] In a first aspect, the present application provides a post-quantum TLCP protocol design method, which is applied to the client of the transport layer cryptographic protocol, including:

[0007] Constructing client handshake information according to a preset cryptographic suite based on the transport layer cryptographic protocol, and sending the client handshake information to the corresponding server, so as to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on the SM2 encryption algorithm and the post-quantum key encapsulation algorithm or a second cryptographic suite constructed based on the SM2 key agreement algorithm and the twice post-quantum key encapsulation algorithm;

[0008] Receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server based on the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on public key information encrypted using the national secret algorithm and public key information using the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm;

[0009] After the key exchange is completed, the identity of itself and the server is authenticated based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so that data between itself and the server is transmitted according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0010] Optionally, constructing the client handshake information based on the transport layer cryptographic protocol according to a preset cryptographic suite includes:

[0011] The post-quantum key encapsulation algorithm public key information corresponding to the preset cipher suite is added to the extended key sharing entry of the extended item of the handshake information of the transport layer cryptographic protocol to construct the client handshake information; the post-quantum key encapsulation algorithm public key information is the post-quantum key encapsulation public key or post-quantum key encapsulation public key certificate of the preset cipher suite.

[0012] Optionally, the exchanging keys between the server and the server based on the transport layer cryptographic protocol according to the server digital certificate and the server key exchange information includes:

[0013] If the preset cipher suite is the first cipher suite, constructing first client key exchange information based on a post-quantum key encapsulation algorithm ciphertext and a national secret algorithm ciphertext; the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm ciphertext are respectively ciphertexts obtained by encrypting a first random number pair pre-generated by the self according to the post-quantum key encapsulation algorithm public key information and the national secret algorithm public key information;

[0014] The first client key exchange information is sent to the server, and based on the transport layer cryptographic protocol, a key exchange is performed between the server and the server according to the server digital certificate, the server key exchange information and the first client key exchange information.

[0015] Optionally, the identity authentication of the user and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information includes:

[0016] Generate, according to the server digital certificate, a first post-quantum algorithm signature and a first national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, respectively, and verify the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the first post-quantum algorithm signature, the first national secret algorithm signature and the server key exchange information;

[0017] If both the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are successfully verified, it is determined that the identity authentication between itself and the server is successful.

[0018] Optionally, after receiving the server digital certificate and server key exchange information sent by the server, the method further includes:

[0019] If the preset cipher suite is the second cipher suite, the digital certificate and the digital certificate request for authenticating the client identity sent by the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are received, and after receiving the digital certificate request, a digital certificate is constructed based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, and the client digital certificate is sent to the server.

[0020] Optionally, the exchanging keys between the server and the server based on the transport layer cryptographic protocol according to the server digital certificate and the server key exchange information includes:

[0021] Constructing second client key exchange information based on the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm key negotiation parameter; the post-quantum key encapsulation algorithm ciphertext is the ciphertext obtained by encrypting the second random number temporarily generated by itself according to the post-quantum key encapsulation algorithm public key information;

[0022] The second client key exchange information is sent to the server, and based on the transport layer cryptographic protocol, a key exchange is performed between itself and the server according to the server digital certificate, the client digital certificate, the server key exchange information and the second client key exchange information.

[0023] Optionally, the identity authentication of the user and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information includes:

[0024] Generate a second post-quantum algorithm signature and a second national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information respectively according to the server digital certificate, and perform an initial verification on the client side of the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the second post-quantum algorithm signature, the second national secret algorithm signature and the server key exchange information;

[0025] Generate a corresponding message digest based on all messages sent by itself to the server, and sign the message digest according to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, respectively, to obtain a corresponding third post-quantum algorithm signature and a third national secret algorithm signature, so that the server can perform a secondary verification on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the third post-quantum algorithm signature and the third national secret algorithm signature;

[0026] If the first verification and the second verification of the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are both successful, it is determined that the identity authentication between itself and the server is successful.

[0027] In a second aspect, the present application provides a post-quantum TLCP protocol design device, which is applied to the client of the transport layer cryptographic protocol, including:

[0028] An information sending module, configured to construct client handshake information according to a preset cryptographic suite based on the transport layer cryptographic protocol, and send the client handshake information to a corresponding server, so as to receive server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on the SM2 encryption algorithm and the post-quantum key encapsulation algorithm, or a second cryptographic suite constructed based on the SM2 key agreement algorithm and the double post-quantum key encapsulation algorithm;

[0029] a key exchange module, configured to receive a server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server based on the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on public key information encrypted using a national secret algorithm and public key information using a post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm;

[0030] The identity authentication module is used to perform identity authentication between itself and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information after the key exchange is completed, so as to perform data transmission between itself and the server based on the obtained identity authentication result according to the pre-master key; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0031] In a third aspect, the present application provides an electronic device comprising a processor and a memory; wherein the memory is used to store a computer program, and the computer program is loaded and executed by the processor to implement the aforementioned post-quantum TLCP protocol design method.

[0032] In a fourth aspect, the present application provides a computer-readable storage medium for storing a computer program, which, when executed by a processor, implements the aforementioned post-quantum TLCP protocol design method.

[0033] In this application, first, the client handshake information can be constructed according to the preset cryptographic suite based on the transport layer cryptographic protocol, and the client handshake information can be sent to the corresponding server to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection between the server and the server, and then receive the server digital certificate and server key exchange information sent by the server, and exchange keys between itself and the server based on the server digital certificate and server key exchange information based on the transport layer cryptographic protocol, and after the key exchange is completed, perform identity authentication of itself and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so as to perform data transmission between itself and the server based on the pre-master key based on the obtained identity authentication result. Through the above technical solution, this application modifies the handshake protocol of the Transport Layer Cryptography Protocol (TLCP) and uses the post-quantum public key cryptography algorithm to ensure the quantum security of the protocol, and designs a post-quantum cryptography algorithm suite to implement the relevant cryptographic functions of the quantum-resistant TLCP protocol, and completes the key exchange function by using the post-quantum key encapsulation algorithm and the SM2 algorithm, and implements the identity authentication function by using the post-quantum digital signature algorithm and the SM2 algorithm. In this way, while adopting a fusion design strategy to retain the current public key cryptography algorithm and related cryptographic functions, the post-quantum public key cryptography algorithm function is added, so that the TLCP protocol can achieve quantum security while having the security of the current public key cryptography. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are merely embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0035] Figure 1 A flow chart of a post-quantum TLCP protocol design method provided in this application;

[0036] Figure 2 A schematic diagram of TLCP protocol message changes provided by this application;

[0037] Figure 3 A schematic diagram of a specific cryptographic suite handshake interaction process and cryptographic operation function provided for this application;

[0038] Figure 4 Another specific cryptographic suite handshake interaction process and cryptographic operation function diagram provided for this application;

[0039] Figure 5 A flowchart of a specific post-quantum TLCP protocol design method provided in this application;

[0040] Figure 6 A schematic diagram of the structure of a post-quantum TLCP protocol design device provided in this application;

[0041] Figure 7 This is a structural diagram of an electronic device provided in this application. DETAILED DESCRIPTION

[0042] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0043] The TLCP protocol uses the national secret algorithm to provide multiple cryptographic functions for two applications. Among them, the handshake protocol has serious security risks in key exchange and identity authentication in the quantum computing environment. It is necessary to use the post-quantum public key cryptography algorithm to enhance quantum security. However, after the post-quantum algorithm is placed in the TLCP protocol, it is easy to cause compatibility, scalability and other problems. This application designs a post-quantum cryptographic algorithm suite, modifies the handshake protocol of the TLCP protocol, and implements the relevant cryptographic functions of the quantum-resistant TLCP protocol. It also uses the post-quantum key encapsulation algorithm and SM2 algorithm to complete the key exchange function, and uses the post-quantum digital signature algorithm and SM2 algorithm to implement the identity authentication function, so that the TLCP protocol can achieve quantum security while having the security of the current public key cryptography.

[0044] See also Figure 1 As shown, an embodiment of the present invention discloses a post-quantum TLCP protocol design method, which is applied to a client of a transport layer cryptographic protocol, including:

[0045] Step S11: construct client handshake information based on the transport layer cryptographic protocol and the preset cryptographic suite, and send the client handshake information to the corresponding server, so as to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on the SM2 encryption algorithm and the post-quantum key encapsulation algorithm, or a second cryptographic suite constructed based on the SM2 key agreement algorithm and the twice post-quantum key encapsulation algorithm.

[0046] It should be noted that the TLCP protocol obtained based on the post-quantum TLCP protocol design method of this embodiment is primarily used for secure communication between the client and server of the protocol. Both the client and the server must communicate data based on the post-quantum TLCP protocol of this embodiment. Specifically, in this embodiment, a client handshake message can be first constructed based on the TLCP protocol and a preset cipher suite. This client handshake message is then sent to the corresponding server, which then receives a server handshake message based on the preset cipher suite in return, and establishes a connection between the server and the client. The preset cipher suite can be a first cipher suite based on elliptic curve cryptography (ECC) or a second cipher suite based on a key exchange algorithm (ECDHE, an elliptic curve-based key exchange mechanism).

[0047] Among them, regarding the above-mentioned cipher suites, in this embodiment, considering that the TLCP protocol mainly supports two types of cipher algorithm suites, ECC_SM4_xxx_SM3 and ECDHE_SM4_xxx_SM3 (xxx can be CBC (Cipher Block Chaining, ciphertext block chaining), GCM (Galois / Counter Mode, symmetric algorithm mode), etc.), in order to add support for post-quantum public key cryptography algorithms, in this embodiment, the two types of cipher algorithm suites, PQCKEM-ECC_SM4_xxx_SM3 and PQCKEM-ECDHE_SM4_xxx_SM3, are added to the quantum attack-resistant TLCP protocol. Among them, PQCKEM (Post-Quantum Cryptography Key Encapsulation Mechanism, post-quantum key encapsulation algorithm) is a specific post-quantum key encapsulation algorithm, such as CRYSTALS-Kyber (if the domestic standardization of the post-quantum key encapsulation algorithm is completed, the domestic algorithm will be used). The specific algorithm parameters are specified in the protocol implementation. Identity authentication relies on a digital certificate that mixes the pre- and post-quantum algorithms (such as a mixture of the CRYSTALS-Dilithium algorithm and the SM2 algorithm). The original data is signed twice, one with the post-quantum signature algorithm and the other with the SM2 algorithm.

[0048] Specifically, the PQCKEM-ECC_SM4_xxx_SM3 cryptographic algorithm suite refers to the key exchange using a mixture of the post-quantum key encapsulation algorithm and the SM2 encryption and decryption algorithm. The post-quantum key encapsulation calculates the shared key as key exchange material 1, and the SM2 encryption and decryption algorithm calculates the key exchange material 2. The two key materials are then XORed (if the lengths are different, the short data is padded with 0x0 to make them the same length and then XORed) to form a pre-master key. The symmetric encryption operation uses SM4_xxx, and the hash operation uses SM3. The corresponding identity authentication is one-way authentication by the server, and the authentication algorithm is a mixture of a certain post-quantum signature algorithm and the SM2 algorithm. The specific algorithm is specified in the digital certificate and is not specifically limited here. The PQCKEM-ECDHE_SM4_xxx_SM3 cryptographic algorithm suite means that the key exchange uses a mixture of two post-quantum key encapsulation algorithms and one SM2 key agreement algorithm. The post-quantum key encapsulation calculates two shared keys as key exchange material 1 and key exchange material 2. The SM2 key agreement algorithm calculates key exchange material 3, and then the three key materials are XORed (when the lengths are different, the short data is padded with 0 to make them the same length and then XORed) to form a pre-master key. The symmetric encryption operation uses SM4_xxx and the hash operation uses SM3. Correspondingly, identity authentication is two-way authentication, and the authentication algorithm is a mixture of a post-quantum signature algorithm and the SM2 algorithm. The specific algorithm is specified in the digital certificate, and it is understandable that the server and client can use different post-quantum signature algorithms. Through the above technical solution, based on the above-mentioned cryptographic suite, only the post-quantum key encapsulation algorithm is specified in the cryptographic algorithm suite, and the specific algorithm parameters are not specified (for example, when using the CRYSTALS-Kyber algorithm, the specific algorithm parameters of 512 / 768 / 1024 are not specified). Instead, one party to the protocol decides it by itself during runtime. The identity authentication algorithm is also not specified, but is determined by the signature certificates of both parties. When performing two-way identity authentication, the digital signature certificates of both parties can use different algorithms. In this way, when designing the extension item of the data packet structure, the algorithm identifier and value can be placed in the structure to support different algorithms and algorithm parameters, so as to enhance the adaptability of the quantum-resistant TLCP protocol to the post-quantum public key cryptographic algorithm.

[0049] And when constructing the client handshake information according to the preset cipher suite, the post-quantum key encapsulation algorithm public key information corresponding to the preset cipher suite can be added to the extended key sharing entry of the extension item of the initial handshake information of the information security technology transport layer cryptographic protocol to construct the client handshake information, wherein the above-mentioned post-quantum key encapsulation algorithm public key information is the post-quantum key encapsulation public key or post-quantum key encapsulation public key certificate of the preset cipher suite. That is to say, Figure 2As shown, this embodiment adapts the message structure during the handshake phase of the quantum-resistant TLCP protocol. The main modified messages include the ClientHello message, ServerCertificate message, ClientCertificate message, ServerKeyExchange message, and ClientKeyExchange message. The specific modifications can be found in Table 1 below. Bold text indicates new or modified content in the quantum-resistant TLCP protocol compared to the current TLCP protocol. This allows the preservation of existing public key cryptographic algorithms and functions while employing a fusion design strategy to integrate post-quantum public key cryptography algorithms into the handshake protocol. This achieves quantum security while maintaining the security of existing public key cryptography. As shown in Table 1, the protocol utilizes extensions to the post-quantum cryptographic algorithm suite and protocol packet structure to support post-quantum algorithms and maintain compatibility with the pre-modified protocol. The protocol interaction process remains unchanged after the modifications, with minimal changes to the packet structure of the interaction messages. The protocol supports switching between cryptographic algorithm suites at runtime, improving the compatibility and dynamic switching capabilities of the quantum-resistant TLCP protocol.

[0050] Table 1: Quantum-resistant TLCP protocol message changes

[0051]

[0052]

[0053]

[0054] Step S12: Receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on the public key information encrypted by the national secret algorithm and the public key information of the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm.

[0055] In this embodiment, after receiving the server digital certificate and server key exchange information sent by the server, the client can perform key exchange between itself and the server based on the TLCP protocol described in the above steps and the received server digital certificate and server key exchange information. It should be noted that the server digital certificate is a digital certificate constructed by the server based on the post-quantum digital signature algorithm public key information, the national secret algorithm public key information, and the post-quantum key encapsulation algorithm public key information in the handshake information. Correspondingly, the server key exchange information is key exchange information constructed by the server based on the post-quantum digital signature algorithm and the signature generated by the national secret algorithm.

[0056] It should be noted that in the quantum-resistant TLCP handshake protocol of this embodiment, the interaction process of the two types of cryptographic algorithm suites, PQCKEM-ECC_SM4_xxx_SM3 and PQCKEM-ECDHE_SM4_xxx_SM3, is the same as the original handshake protocol interaction process, but the corresponding cryptographic function process needs to be modified, mainly including the negotiation of the cryptographic algorithm suite, the key exchange function to generate the pre-master key, and the use of the digital certificate of the hybrid algorithm for one-way or two-way identity authentication. In a specific embodiment, if the cryptographic algorithm suite used is PQCKEM-ECC_SM4_xxx_SM3, the interaction process is as follows: Figure 3 As shown, the solid box represents a message, the braces in the message represent the values ​​of some variables in the message, the dotted box represents the cryptographic operation function, the identification string xxx represents the context definition and is not shown in the figure, pqckem_parameter represents a certain post-quantum key encapsulation algorithm public key parameter (it can be the original parameter of the public key information, or it can be a digital certificate containing public key information. When it is a digital certificate, the signature algorithm is the same as the signature certificate, and it is signed by the private key that issues the signature certificate), pqc_sign and pqc_verify represent the use of a certain post-quantum signature algorithm for signing and verification operations, pqckem_pack and pqckem_depack represent the use of a certain post-quantum key encapsulation algorithm for key encapsulation and decapsulation operations, ... represents omitted data, which is the same as the original protocol. In another specific embodiment, if the cryptographic algorithm suite used is PQCKEM-ECDHE_SM4_xxx_SM3, the interaction process is as follows: Figure 4 As shown, the meaning of each mark is the same as Figure 3 The same is not repeated here. sm2_dhkey represents the relevant parameters during SM2 key negotiation, and sm2_dh represents SM2 key negotiation operation.

[0057] Step S13: After the key exchange is completed, the identity of itself and the server is authenticated based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so that data between itself and the server is transmitted according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0058] In this embodiment, after the key exchange is complete, the client can authenticate itself and the server using the post-quantum digital signature algorithm public key information and the national secret algorithm public key information. Based on the obtained authentication result, the client can then use the pre-master key to transfer data between itself and the server. It should be noted that the pre-master key is generated based on the server-side key exchange information and the client-side key exchange information.

[0059] Through the above technical solution, this embodiment retains the interaction process between the national secret algorithm and the original protocol, thereby retaining the national secret SM2 and SM9 algorithms and related functions through the quantum-resistant TLCP protocol. In this way, even if the security of the post-quantum public key cryptography algorithm is compromised, the national secret SM2 and SM9 algorithms can still ensure the security of the protocol in a classical computing environment. This embodiment also incorporates a post-quantum key encapsulation algorithm and a post-quantum digital signature algorithm, expands the protocol cryptographic algorithm suite and the packet structure of interactive messages, and achieves quantum security for the protocol. At the same time, by using extensions to the post-quantum cryptographic algorithm suite and protocol packet structure to support post-quantum algorithms and maintain compatibility with the pre-modified protocol, protocol compatibility and dynamic negotiation switching are guaranteed. Furthermore, during key exchange and authentication, the TLCP protocol is not strongly bound to specific post-quantum algorithms, but rather adopts a more flexible design strategy, which helps enhance the protocol's adaptability.

[0060] Based on the previous embodiment, it can be seen that this application can complete the key exchange function by using the post-quantum key encapsulation algorithm and the SM2 algorithm, and use the post-quantum digital signature algorithm and the SM2 algorithm to realize the identity authentication function. Next, this embodiment will describe the above identity authentication process in detail. Figure 5 As shown, the embodiment of the present application discloses a post-quantum TLCP protocol design method, which is applied to the client of the transport layer cryptographic protocol, including:

[0061] Step S21: Receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server according to the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on the public key information encrypted by the national secret algorithm and the public key information of the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm.

[0062] In this embodiment, when exchanging keys between the client and the server,

[0063] In a specific embodiment, if the cryptographic algorithm suite used is PQCKEM-ECC_SM4_xxx_SM3, that is, the first cryptographic suite, the first client key exchange information is constructed based on the post-quantum key encapsulation algorithm public key ciphertext and the national secret algorithm ciphertext, and then the first client key exchange information is sent to the server, and based on the information security technology transport layer cryptographic protocol, the key exchange between itself and the server is performed according to the server digital certificate, the server key exchange information and the first client key exchange information. Among them, the above-mentioned post-quantum key encapsulation algorithm public key ciphertext and the national secret algorithm ciphertext are respectively the ciphertexts obtained by encrypting the first random number pre-generated by itself according to the post-quantum key encapsulation algorithm public key information and the national secret algorithm public key information. As Figure 3 As shown in the figure, when exchanging cryptographic algorithm suites, the client adds the cipher suite PQCKEM-ECC_xxx (i.e., PQCKEM-ECC_SM4_xxx_SM3) for the post-quantum key encapsulation algorithm and the ECC algorithm to the ClientHello message. The server then selects this suite in the ServerHello message. Accordingly, during key exchange, the server can combine the public key information of the post-quantum key encapsulation algorithm and the SM2 certificate information and transmit them to the client via the Certificate message. The client combines the post-quantum key encapsulation ciphertext and the SM2 encrypted ciphertext and transmits it to the server via the ClientKeyExchange message. After two key exchanges, the random numbers randA and randB are obtained. These are then XORed to derive the final pre-master key for subsequent data transmission between the client and server.

[0064] In another specific embodiment, if the cryptographic algorithm suite adopted is PQCKEM-ECDHE_SM4_xxx_SM3, that is, the second cryptographic suite, after receiving the server digital certificate and server key exchange information sent by the server, the client can also receive a digital certificate request sent by the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm public key information, and after receiving the digital certificate request, construct its own client digital certificate based on the server digital certificate, and send the client digital certificate to the server. Afterwards, when performing the key exchange between itself and the server, that is, construct the second client key exchange information based on the post-quantum key encapsulation algorithm public key ciphertext and the national secret algorithm key negotiation parameters, and then send the second client key exchange information to the server, and perform the key exchange between itself and the server based on the information security technology transport layer cryptographic protocol according to the server digital certificate, client digital certificate, server key exchange information and the second client key exchange information. Among them, the above-mentioned post-quantum key encapsulation algorithm public key ciphertext is the ciphertext obtained by encrypting the second random number pre-generated by itself according to the post-quantum key encapsulation algorithm public key information. As Figure 4 As shown in the figure, during cipher suite exchange, the client adds the cipher suite PQCKEM-ECDHE_xxx (i.e., PQCKEM-ECDHE_SM4_xxx_SM3) for the post-quantum key encapsulation algorithm and the ECDHE algorithm to the ClientHello message. The server selects this suite in the ServerHello message. Key exchange then proceeds. The client first transmits its post-quantum key-encapsulated public key to the server via the ClientHello message. The server transmits its post-quantum key-encapsulated public key and SM2 encryption certificate to the client via the ServerCertificate message. The client then transmits its SM2 encryption certificate to the server via the ClientCertificate message. The server then uses the client's post-quantum key-encapsulated public key to encapsulate random key material randA. The client then uses the server's post-quantum key-encapsulated public key to encapsulate random key material randB. The server then uses the SM2 key agreement algorithm to negotiate random key material randC. The three random numbers are then XORed together to obtain the pre-master key.

[0065] Step S22: After the key exchange is completed, the identity of itself and the server is authenticated based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so that data between itself and the server is transmitted according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0066] In a specific embodiment, if the cryptographic algorithm suite employed is PQCKEM-ECC_SM4_xxx_SM3, i.e., the first cryptographic suite, when authenticating itself and the server, a first post-quantum algorithm signature and a first national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm public key information, respectively, are generated based on the server's digital certificate. The post-quantum digital signature algorithm public key information and the national secret algorithm public key information are then verified based on the first post-quantum algorithm signature, the first national secret algorithm signature, and the server's key exchange information. If both the post-quantum digital signature algorithm public key information and the national secret algorithm public key information are successfully verified, the authentication between itself and the server is determined to be successful. In other words, after the server transmits a certificate (hybrid algorithm digital certificate) containing the post-quantum digital signature public key information and the SM2 public key information to the client via a Certificate message, it then creates a post-quantum signature and an SM2 signature on the post-quantum key encapsulation public key and other information, attaching the signature result to a ServerKeyExchange message and transmitting it to the client. The client then uses the certificate and signature result to verify the post-quantum signature and SM2 signature, respectively. Only when both signatures are successfully verified is the server's identity authentication considered successful.

[0067] In another specific embodiment, if the cryptographic algorithm suite adopted is PQCKEM-ECDHE_SM4_xxx_SM3, that is, the second cryptographic suite, the second post-quantum algorithm signature and the second national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm public key information can be generated respectively according to the server digital certificate, and the post-quantum digital signature algorithm public key information and the national secret algorithm public key information are first verified based on the second post-quantum algorithm signature, the second national secret algorithm signature and the server key exchange information; then, based on all messages sent by itself to the server, a corresponding message digest is generated, and the message digest is signed according to the post-quantum digital signature algorithm public key information and the national secret algorithm public key information, respectively, to obtain the corresponding third post-quantum algorithm signature and the third national secret algorithm signature, and the post-quantum digital signature algorithm public key information and the national secret algorithm public key information are secondarily verified based on the third post-quantum algorithm signature and the third national secret algorithm signature. If the first verification and the second verification of the post-quantum digital signature algorithm public key information and the national secret algorithm public key information are both successful, it is determined that the identity authentication between itself and the server is passed. That is to say, the server can transmit the signature certificate (hybrid algorithm digital certificate) containing the post-quantum signature public key information and SM2 public key information to the client through the ServerCertificate message, and the client also transmits its own similar signature certificate to the server through the ClientCertficate message. After that, the server performs a post-quantum signature and SM2 signature on the post-quantum key encapsulation public key and other information, and attaches the signature result to the ServerKeyExchange message and transmits it to the client. The client verifies it, and the client performs a post-quantum signature and SM2 signature on all messages from the ClientHello message to the present, and sends it to the server through the CertificateVerify message. The server verifies it. Only when all four verifications are passed can the identity authentication of both parties be considered successful.

[0068] Through the above technical solution, the cryptographic algorithm suite used by the quantum-resistant TLCP protocol in this embodiment only specifies one post-quantum key encapsulation algorithm, but does not specify specific algorithm parameters or the algorithm used for identity authentication, thereby reducing the number of cryptographic algorithm suites. The extended item design and conditional options (switch-case structure) of the message structure are then used to adapt to different cryptographic algorithm suites, making the protocol more compatible, extensible, and adaptable.

[0069] See also Figure 6 As shown, the embodiment of the present application also discloses a post-quantum TLCP protocol design device, which is applied to the client of the transport layer cryptographic protocol, including:

[0070] An information sending module 11 is configured to construct client handshake information based on a preset cryptographic suite based on the transport layer cryptographic protocol, and send the client handshake information to a corresponding server, so as to receive server handshake information based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on the SM2 encryption algorithm and the post-quantum key encapsulation algorithm, or a second cryptographic suite constructed based on the SM2 key agreement algorithm and the double post-quantum key encapsulation algorithm;

[0071] A key exchange module 12 is configured to receive a server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server based on the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on public key information encrypted using a national secret algorithm and public key information encrypted using a post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm;

[0072] The identity authentication module 13 is used to perform identity authentication between itself and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information after the key exchange is completed, so as to transmit data between itself and the server according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

[0073] This embodiment can construct client handshake information based on the preset cryptographic suite based on the transport layer cryptographic protocol, and send the client handshake information to the corresponding server to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection between the server and the server, and then receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server based on the server digital certificate and server key exchange information based on the transport layer cryptographic protocol, and after the key exchange is completed, perform identity authentication of itself and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so as to perform data transmission between itself and the server based on the pre-master key based on the obtained identity authentication result. Through the above technical solution, in this embodiment, the handshake protocol of the TLCP protocol is modified, and the post-quantum public key cryptography algorithm is used to ensure the quantum security of the protocol. In addition, a post-quantum cryptography algorithm suite is designed to implement the relevant cryptographic functions of the quantum-resistant TLCP protocol, and the key exchange function is completed by using the post-quantum key encapsulation algorithm and the SM2 algorithm, and the identity authentication function is implemented by using the post-quantum digital signature algorithm and the SM2 algorithm. Thus, while adopting a fusion design strategy to retain the current public key cryptography algorithm and related cryptographic functions, the post-quantum public key cryptography algorithm function is added, so that the TLCP protocol can achieve quantum security while having the security of the current public key cryptography.

[0074] In some specific embodiments, the information sending module 11 specifically includes:

[0075] A first information construction unit is configured to add the post-quantum key encapsulation algorithm public key information corresponding to the preset cryptographic suite to the extended key sharing entry of the extended item of the handshake information of the transport layer cryptographic protocol to construct the client handshake information; the post-quantum key encapsulation algorithm public key information is the post-quantum key encapsulation public key or post-quantum key encapsulation public key certificate of the preset cryptographic suite.

[0076] In some specific embodiments, the key exchange module 12 specifically includes:

[0077] a second information construction unit, configured to, if the preset cipher suite is the first cipher suite, construct first client key exchange information based on a post-quantum key encapsulation algorithm ciphertext and a national secret algorithm ciphertext; the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm ciphertext being ciphertexts obtained by encrypting a first random number pair pre-generated by the user according to the post-quantum key encapsulation algorithm public key information and the national secret algorithm public key information;

[0078] The first key exchange unit is used to send the first client key exchange information to the server, and based on the transport layer cryptographic protocol, perform key exchange between itself and the server according to the server digital certificate, the server key exchange information and the first client key exchange information.

[0079] In some specific embodiments, the identity authentication module 13 specifically includes:

[0080] a signature generation unit, configured to generate, according to the server digital certificate, a first post-quantum algorithm signature and a first national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, respectively, and verify the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the first post-quantum algorithm signature, the first national secret algorithm signature, and the server key exchange information;

[0081] The first identity authentication unit is used to determine that the identity authentication between itself and the server is successful if both the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are successfully verified.

[0082] In some specific embodiments, the identity authentication device further includes:

[0083] A certificate construction module is used to receive the digital certificate and the digital certificate request for authenticating the client identity sent by the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information if the preset cryptographic suite is the second cryptographic suite, and after receiving the digital certificate request, construct a digital certificate based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, and send the client digital certificate to the server.

[0084] In some specific embodiments, the key exchange module 12 specifically includes:

[0085] A third information construction unit is used to construct second client key exchange information based on the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm key negotiation parameter; the post-quantum key encapsulation algorithm ciphertext is the ciphertext obtained by encrypting the second random number temporarily generated by itself according to the post-quantum key encapsulation algorithm public key information;

[0086] The second key exchange unit is used to send the second client key exchange information to the server, and based on the transport layer cryptographic protocol, perform key exchange between itself and the server according to the server digital certificate, the client digital certificate, the server key exchange information and the second client key exchange information.

[0087] In some specific embodiments, the identity authentication module 13 specifically includes:

[0088] A first information verification unit is configured to generate, according to the server digital certificate, a second post-quantum algorithm signature and a second national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, respectively, and perform an initial verification on the client side of the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the second post-quantum algorithm signature, the second national secret algorithm signature, and the server key exchange information;

[0089] A second information verification unit is configured to generate a corresponding message digest based on all messages sent by itself to the server, and sign the message digest according to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, respectively, to obtain a corresponding third post-quantum algorithm signature and a third national secret algorithm signature, so as to perform secondary verification on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the third post-quantum algorithm signature and the third national secret algorithm signature on the server;

[0090] The second identity authentication unit is used to determine that the identity authentication between itself and the server is successful if the first verification and the second verification of the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are both successful.

[0091] Furthermore, the embodiment of the present application also discloses an electronic device, Figure 7 This is a structural diagram of an electronic device 20 according to an exemplary embodiment. The content in the diagram should not be considered as any limitation to the scope of application of the present application.

[0092] Figure 7 This is a schematic diagram of the structure of an electronic device 20 provided in an embodiment of the present application. The electronic device 20 may include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, which is loaded and executed by the processor 21 to implement the relevant steps of the identity authentication method disclosed in any of the aforementioned embodiments. Furthermore, the electronic device 20 in this embodiment may be a computer.

[0093] In this embodiment, the power supply 23 is used to provide operating voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device. The communication protocol it follows is any communication protocol that can be applied to the technical solution of this application and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world. Its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0094] In addition, the memory 22, as a carrier for resource storage, can be a read-only memory, random access memory, disk or CD, etc. The resources stored thereon can include an operating system 221, a computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0095] The operating system 221 is used to manage and control the hardware devices on the electronic device 20 and the computer program 222, and can be Windows Server, Netware, Unix, Linux, etc. In addition to including a computer program capable of performing the identity authentication method performed by the electronic device 20 disclosed in any of the aforementioned embodiments, the computer program 222 can further include a computer program capable of performing other specific tasks.

[0096] Furthermore, this application also discloses a computer-readable storage medium for storing a computer program; wherein, when executed by a processor, the computer program implements the aforementioned identity authentication method. The specific steps of this method can be referred to the corresponding contents disclosed in the aforementioned embodiments and will not be repeated here.

[0097] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from the other embodiments. Reference can be made to the descriptions of the identical or similar parts between the various embodiments. For the devices disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the descriptions are relatively simple, and the relevant parts can be referred to the descriptions of the methods.

[0098] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the components and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0099] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0100] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or device comprising the element.

[0101] The above is a detailed introduction to the technical solution provided by the present application. Specific examples are used herein to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for those skilled in the art, according to the ideas of the present application, there may be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A post-quantum TLCP protocol design method, characterized in that: Clients for transport layer cryptographic protocols, including: Constructing client handshake information according to a preset cryptographic suite based on the transport layer cryptographic protocol, and sending the client handshake information to the corresponding server, so as to receive the server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on the SM2 encryption algorithm and the post-quantum key encapsulation algorithm or a second cryptographic suite constructed based on the SM2 key agreement algorithm and the twice post-quantum key encapsulation algorithm; Receive the server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server based on the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on public key information encrypted using the national secret algorithm and public key information using the post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm; After the key exchange is completed, the identity of itself and the server is authenticated based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, so that data between itself and the server is transmitted according to the pre-master key based on the obtained identity authentication result; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

2. The post-quantum TLCP protocol design method according to claim 1, characterized in that The constructing the client handshake information based on the transport layer cryptographic protocol and the preset cryptographic suite includes: The post-quantum key encapsulation algorithm public key information corresponding to the preset cipher suite is added to the extended key sharing entry of the extended item of the handshake information of the transport layer cryptographic protocol to construct the client handshake information; the post-quantum key encapsulation algorithm public key information is the post-quantum key encapsulation public key or post-quantum key encapsulation public key certificate of the preset cipher suite.

3. The post-quantum TLCP protocol design method according to claim 1 or 2, characterized in that The exchanging keys between the server and the server based on the transport layer cryptographic protocol according to the server digital certificate and the server key exchange information includes: If the preset cipher suite is the first cipher suite, constructing first client key exchange information based on a post-quantum key encapsulation algorithm ciphertext and a national secret algorithm ciphertext; the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm ciphertext are respectively ciphertexts obtained by encrypting a first random number pair pre-generated by the self according to the post-quantum key encapsulation algorithm public key information and the national secret algorithm public key information; The first client key exchange information is sent to the server, and based on the transport layer cryptographic protocol, a key exchange is performed between the server and the server according to the server digital certificate, the server key exchange information and the first client key exchange information.

4. The post-quantum TLCP protocol design method according to claim 3, characterized in that The identity authentication of the user and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information includes: Generate, according to the server digital certificate, a first post-quantum algorithm signature and a first national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information, respectively, and verify the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the first post-quantum algorithm signature, the first national secret algorithm signature and the server key exchange information; If both the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are successfully verified, it is determined that the identity authentication between itself and the server is successful.

5. The post-quantum TLCP protocol design method according to claim 1 or 2, characterized in that: After receiving the server digital certificate and server key exchange information sent by the server, the method further includes: If the preset cipher suite is the second cipher suite, the digital certificate and the digital certificate request for authenticating the client identity sent by the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are received, and after receiving the digital certificate request, a digital certificate is constructed based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, and the client digital certificate is sent to the server.

6. The post-quantum TLCP protocol design method according to claim 5, characterized in that The exchanging keys between the server and the server based on the transport layer cryptographic protocol according to the server digital certificate and the server key exchange information includes: Constructing second client key exchange information based on the post-quantum key encapsulation algorithm ciphertext and the national secret algorithm key negotiation parameter; the post-quantum key encapsulation algorithm ciphertext is the ciphertext obtained by encrypting the second random number temporarily generated by itself according to the post-quantum key encapsulation algorithm public key information; The second client key exchange information is sent to the server, and based on the transport layer cryptographic protocol, a key exchange is performed between itself and the server according to the server digital certificate, the client digital certificate, the server key exchange information and the second client key exchange information.

7. The post-quantum TLCP protocol design method according to claim 6, characterized in that The identity authentication of the user and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information includes: Generate a second post-quantum algorithm signature and a second national secret algorithm signature corresponding to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information respectively according to the server digital certificate, and perform an initial verification on the client side of the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the second post-quantum algorithm signature, the second national secret algorithm signature and the server key exchange information; Generate a corresponding message digest based on all messages sent by itself to the server, and sign the message digest according to the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information of the client, respectively, to obtain a corresponding third post-quantum algorithm signature and a third national secret algorithm signature, so that the server can perform a secondary verification on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information based on the third post-quantum algorithm signature and the third national secret algorithm signature; If the first verification and the second verification of the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information are both successful, it is determined that the identity authentication between itself and the server is successful.

8. A post-quantum TLCP protocol design device, characterized in that: Clients for transport layer cryptographic protocols, including: An information sending module, configured to construct client handshake information according to a preset cryptographic suite based on the transport layer cryptographic protocol, and send the client handshake information to a corresponding server, so as to receive server handshake information constructed based on the preset cryptographic suite returned by the server, and establish a connection with the server; the preset cryptographic suite is a first cryptographic suite constructed based on the SM2 encryption algorithm and the post-quantum key encapsulation algorithm, or a second cryptographic suite constructed based on the SM2 key agreement algorithm and the double post-quantum key encapsulation algorithm; a key exchange module, configured to receive a server digital certificate and server key exchange information sent by the server, and perform key exchange between itself and the server based on the server digital certificate and the server key exchange information based on the transport layer cryptographic protocol; the server digital certificate is a digital certificate constructed based on public key information encrypted using a national secret algorithm and public key information using a post-quantum key encapsulation algorithm, and the server key exchange information is constructed based on the post-quantum key encapsulation algorithm and the national secret algorithm; The identity authentication module is used to perform identity authentication between itself and the server based on the post-quantum digital signature algorithm public key information and the national secret algorithm signature public key information after the key exchange is completed, so as to perform data transmission between itself and the server based on the obtained identity authentication result according to the pre-master key; the pre-master key is a key generated based on the server key exchange information and the client key exchange information.

9. An electronic device, characterized in that: The electronic device includes a processor and a memory; wherein the memory is used to store a computer program, and the computer program is loaded and executed by the processor to implement the post-quantum TLCP protocol design method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that Used to store a computer program, which, when executed by a processor, implements the post-quantum TLCP protocol design method according to any one of claims 1 to 7.

Images