A commercial cryptographic digital certificate generation method supporting quantum-resistant cryptography

Abstract

The application relates to the technical field of information security, in particular to a commercial cipher digital certificate generation method supporting quantum-resistant cipher, which comprises the following steps: a certificate authority generates a hybrid signature self-signed certificate with quantum-resistant cipher signature and traditional public key cipher signature; a user generates a hybrid signature certificate request file and sends the file to the certificate authority; the certificate authority generates a hybrid signature user signature certificate; a key generation center generates a user traditional public key cipher encryption key pair and a user quantum-resistant cipher encryption key pair; the certificate authority generates a hybrid signature user encryption certificate; the certificate authority generates a hybrid encryption public key, a private key encryption ciphertext and a hybrid ciphertext; and the user extracts the hybrid signature signature certificate, the encryption certificate, the quantum-resistant cipher encryption private key and the traditional public key cipher encryption private key, and verifies the signature certificate and the encryption certificate. The application can resist quantum attacks and is compatible with existing digital certificates.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and more specifically to a method for generating commercial cryptographic digital certificates that supports quantum-resistant cryptography. Background Technology

[0002] Current commercial cryptographic digital certificate systems primarily employ traditional public-key cryptography algorithms. However, with the rapid development of quantum technology, traditional public-key cryptography algorithms face the risk of being compromised, posing a challenge to the security of digital certificate systems. The replacement of traditional public-key cryptography algorithms with quantum-resistant cryptographic algorithms is becoming a future trend, making the generation of commercial cryptographic digital certificates that support quantum attack resistance an urgent matter. Summary of the Invention

[0003] In view of this, the present invention provides a method for generating commercial cryptographic digital certificates that supports quantum-resistant cryptography. Under quantum attack environments, the security of the digital certificate system is guaranteed, and the generated user certificates are compatible with existing digital certificates.

[0004] To achieve the above objectives, the present invention adopts the following technical solution:

[0005] A method for generating commercial cryptographic digital certificates that support quantum-resistant cryptography includes the following steps:

[0006] The certificate authority generates a hybrid signature self-signed certificate that combines quantum-resistant cryptographic signatures with traditional public-key cryptographic signatures;

[0007] The user generates a hybrid signature certificate request file and sends it to the certificate authority;

[0008] The certificate authority verifies the hybrid signature certificate request file and, upon successful verification, generates a user signature certificate that simultaneously possesses a quantum-resistant cryptographic signature and a traditional public-key cryptographic signature.

[0009] The key generation center generates the user's traditional public-key cryptography encryption key pair and the user's quantum-resistant cryptography encryption key pair, and returns them to the certificate authority;

[0010] Certificate authorities generate user encryption certificates that possess a hybrid signature that combines quantum-resistant cryptographic signatures with traditional public-key cryptographic signatures;

[0011] The certificate authority generates a hybrid encryption private key and a hybrid encryption public key based on traditional public-key cryptography encryption key pairs and quantum cryptography encryption key pairs. It generates private key encrypted ciphertext and hybrid ciphertext based on the user's signature certificate, user encryption certificate, and random symmetric algorithm key, and sends the hybrid encryption public key, private key encrypted ciphertext, and hybrid ciphertext to the user.

[0012] Users extract the signature certificate, encryption certificate, quantum-resistant cryptographic private key, and traditional public-key cryptographic private key of the hybrid signature, and verify the signature certificate and encryption certificate.

[0013] Furthermore, the process by which a certificate authority generates a hybrid signature self-certified certificate includes:

[0014] Certificate Authorities (CAs) possess two types of keys: traditional public-key cryptography signature key pairs (CASKs). GMsig CAPK GMsig ) and quantum-resistant cryptographic signature key pairs (CASK) PQCsig CAPK PQCsig );

[0015] Among them, CASK GMsig This refers to the Certificate Authority's traditional public-key cryptographic signature private key, CAPK. GMsig The Certificate Authority's traditional public-key cryptographic signature public key, CASK PQCsig This indicates the certificate authority's quantum-resistant cryptographic signature private key, CAPK. PQCsig This indicates the public key for quantum-resistant cryptographic signatures issued by the certificate authority;

[0016] Certificate Authorities (CAs) sign their own traditional public-key cryptographic public keys using CAPK. GMsig The quantum-resistant cryptographic signature public key CAPK is placed in the public key field of the certificate. PQCsig Place it in the extension of the certificate to be signed message;

[0017] Using your own quantum-resistant cryptographic signature private key CASK PQCsig Perform quantum-resistant cryptographic signing (CAsig) on ​​the message tb to be signed for the certificate. PQC =Sign PQC (tb, CASK) PQCsig The signature result CAsig PQC Place it in the extension of the certificate to be signed message;

[0018] Update the message to be signed to tb new Certificate Authorities (CAs) utilize traditional public-key cryptography and private-key cryptography (CASK). GMsig The message tb for the certificate to be signed new Perform traditional public-key cryptographic signatures CAsig GM =Sign GM (tb new CASK GMsig The signature result CAsig GM When placed in the signature section of the certificate, a hybrid signature self-signed certificate is generated that simultaneously possesses quantum-resistant cryptographic signature and traditional public-key cryptographic signature.

[0019] Among them, CAsigPQC CAsig represents the quantum-resistant cryptographic signature result of the certificate issuing authority's self-signed certificate. GM Sign represents the traditional public-key cryptographic signature result of a certificate issued by a certificate authority. PQC () indicates a quantum-resistant cryptographic signature operation, Sign GM () indicates a traditional public-key cryptographic signature operation.

[0020] Furthermore, the process of a user generating a hybrid signature certificate request file includes:

[0021] Users generate their own traditional public-key cryptographic signature key pairs (USK). GMsig UPK GMsig Quantum-resistant cryptographic signature key pairs (USK) PQCsig UPK PQCsig ) and quantum-resistant cryptographic temporary key pairs (TUSK) PQCenc TUPK PQCenc );

[0022] Among them, USK GMsig UPK represents the user's traditional public-key cryptographic signature private key. GMsig This represents the user's traditional public-key cryptographic signing public key, USK. PQCsig UPK represents the user's quantum-resistant cryptographic signature private key. PQCsig TUSK represents the user's quantum-resistant cryptographic signature public key. PQCenc This indicates that the user's quantum-resistant cryptographic temporary private key is encrypted using TUPK. PQCenc This indicates that the user's temporary public key is encrypted using quantum-resistant cryptography.

[0023] The user uses their own identity information as the UID to calculate the hybrid public key UPK. mix =UPK GMsig ||UPK PQCsig ||TUPK PQCenc Calculate the user signature message um=UPK Mix ||UID; using its own quantum-resistant cryptographic signature private key USK PQCsig Generate quantum-resistant cryptographic signatures sig against um PQC =Sign PQC (um, USK PQCsig Using traditional public-key cryptography to sign the private key USK GMsig Generate a traditional public-key cryptographic signature for um using sig. GM =Sign GM (um, USK GMsig ), generate a mixed signature sig for um mix = sig PQC ||sig GMCombine the user-signed message um with the mixed signature sig mix Generate Hybrid Signature Certificate Request File (CSR) mix Send to the certificate authority;

[0024] Where || represents the join operation, sig PQC sig represents the user's quantum-resistant cryptographic signature result. GM This represents the result of a user's traditional public-key cryptographic signature.

[0025] Furthermore, the process by which a certificate authority verifies a hybrid signature certificate request file includes:

[0026] Certificate Authority receives a Hybrid Signature Certificate Request (CSR) file from a user. mix Extract the user's traditional public key cryptographic signature public key UPK. GMsig Quantum-resistant cryptographic signature public key UPK PQCsig Quantum-resistant cryptographic temporary public key TUPK PQCenc User identity information (UID), quantum-resistant cryptographic signature (SIG) PQC and traditional key signature SIG GM ;

[0027] Using quantum-resistant cryptographic signature public key UPK PQCsig Verify quantum-resistant cryptographic signatures sig PQC Validity a=Verify PQC (sig PQC ,UPK Mix ||UID, UPK PQCsig Using traditional public-key cryptography to sign public keys UPK GMsig Verify traditional key signature sig GM Validity b = Verify GM (sig GM ,UPK Mix ||UID, UPK GMsig If both a and b are true, the verification passes and the certificate authority continues with the next steps; otherwise, the certificate authority exits the user certificate generation step.

[0028] Among them, Verify PQC () represents the verification operation for quantum-resistant cryptographic signatures, Verify. GM () indicates the verification operation of traditional public-key cryptographic signatures.

[0029] Furthermore, the process by which a certificate authority generates a user-signed certificate with a hybrid signature includes:

[0030] Certificate Authorities (CAs) use traditional public-key cryptography to sign public keys (UPKs). GMsigPlace the quantum-resistant cryptographic signing public key UPK in the public key field of the user signing certificate. PQCsig The user identity information is placed in the extended field of the certificate and combined with the user identity information in the hybrid signature certificate request file (CSR) to generate the user signature certificate to be signed message (utb).

[0031] Using your own quantum-resistant cryptographic signature private key CASK PQCsig Perform quantum-resistant cryptographic signing on the message to be signed (utb) of the user signature certificate to generate a quantum-resistant signature (usig) for the user signature certificate. PQC =Sign PQC (utb, CASK PQCsig ), signature result usig PQC Place it in the extension of the message to be signed in the signing certificate;

[0032] Update the message to be signed to utb new =utb||usig PQC Using traditional public-key cryptography and private key CASK GMsig UTB message to be signed for the signing certificate new Perform traditional public-key cryptographic signing and generate a user signature certificate. (Traditional signing using USIG) GM =Sign GM (utb new CASK GMsig ), signature result usig GM Placed in the signature section of the signature certificate, it generates a hybrid signature certificate for users that combines quantum-resistant cryptographic signatures and traditional public-key cryptographic signatures. (UCer) sig .

[0033] Furthermore, the process by which the key generation center generates the user's traditional public-key cryptography encryption key pair and the user's quantum-resistant cryptography encryption key pair is as follows:

[0034] Certificate authorities send key pair generation requests to key generation centers;

[0035] After receiving the request, the key generation center runs a traditional public-key cryptography key generation algorithm to generate a traditional public-key cryptography encryption key pair (USK) for the user. GMenc UPK GMenc ), and run the quantum-resistant cryptographic key generation algorithm to generate quantum-resistant cryptographic key pairs (USK). PQCenc UPK PQCenc ), and will use the user's two private keys USK GMenc With USK PQCenc Save it, and at the same time, (USK) GMenc UPK GMenc ) and (USK PQCenc UPKPQCenc It is sent to the certificate authority via a secure channel;

[0036] Among them, USK GMenc UPK represents the user's traditional public-key cryptography encryption of their private key. GMenc This represents the user's traditional public-key cryptography public key, USK. PQCenc UPK represents the user's quantum-resistant cryptographic private key. PQCsig This represents the user's quantum-resistant cryptographic public key.

[0037] Furthermore, the process by which a certificate authority generates a user's encryption certificate is as follows:

[0038] The certificate authority receives two key pairs from the key generation center and encrypts the public key UPK using traditional public-key cryptography. GMenc Place the quantum-resistant cryptographic public key UPK in the public key field of the encryption certificate. PQCenc The extended fields of the encryption certificate, combined with the user identity information in the hybrid signature certificate request file, generate the unsigned message utb for the encryption certificate. enc ;

[0039] Using your own quantum-resistant cryptographic signature private key CASK PQCsig UTB message for unsigned encryption certificate enc Perform quantum-resistant cryptographic signatures and generate quantum-resistant signatures for user encryption certificates (usig) PQCenc =Sign PQC (utb enc CASK PQCsig ), signature result usig PQCenc Place it in the extension of the message to be signed for the encrypted certificate;

[0040] Update the message to be signed to utb enc_new Using traditional public-key cryptography and private key CASK GMsig UTB message for unsigned encryption certificate enc_new Perform traditional public-key cryptographic signing to generate user encryption certificate traditional signature usig GMenc = Sign GM (utb enc_new CASK GMsig ), signature result usig GMenc Placed in the signature section of the encryption certificate, it generates a hybrid signature for the user, possessing both quantum-resistant cryptographic signatures and traditional public-key cryptographic signatures. (UCer) enc .

[0041] Furthermore, the process by which a certificate authority generates a hybrid encryption public key, a private key-encrypted ciphertext, and a hybrid ciphertext includes:

[0042] Certificate Authority generates hybrid encryption private key (USK) mix =USK GMenc ||USK PQCenc With hybrid encryption public key UPK mix =UPK GMenc ||UPK PQCenc Using quantum-resistant cryptography to encrypt temporary public keys TUPK PQCenc Run the encryption algorithm to generate a quantum-resistant cryptographic temporary ciphertext tct and a temporary shared key tss, and use tss as the symmetric algorithm key;

[0043] Computational symmetric algorithm plaintext m=USK mix ||UCer sig ||UCer enc Calculate quantum-resistant ciphertext c PQC =Enc Sym (m,tss);

[0044] Randomly select a symmetric algorithm key K, and then use the quantum-resistant ciphertext c. PQC As plaintext for a symmetric algorithm, calculate the ciphertext c using the private key. SK =Enc Sym (c PQC , K);

[0045] Using the user's traditional public-key cryptography to sign the public key UPK GMsig Encrypt the symmetric algorithm key K to generate the symmetric algorithm key encrypted ciphertext c. K =Enc GM (K,UPK GMsig ), generating mixed ciphertext c mix =c K ||tct;

[0046] Among them, Enc Sym () denotes a symmetric encryption operation, Enc GM () indicates a traditional public-key cryptography encryption operation.

[0047] Furthermore, the process by which a user extracts the signing certificate, encryption certificate, quantum-resistant cryptographic private key, and traditional public-key cryptographic private key includes:

[0048] User extracts quantum-resistant cryptographic public key UPK PQCenc Traditional public-key cryptography encrypts public key UPK GMenc Symmetric algorithm key encryption of ciphertext c K Temporary quantum-resistant cryptographic key encapsulation of ciphertext tct;

[0049] Using your own traditional public-key cryptography to sign public key USK GMsigDecrypting symmetric algorithm encrypted ciphertext c K Obtain the symmetric algorithm key K=Dec GM (K, USK GMsig Using a symmetric algorithm with key K, the ciphertext c encrypted with the private key is decrypted. SK Obtain quantum-resistant ciphertext c PQC =Dec Sym (c SK , K);

[0050] Using its own temporary quantum-resistant cryptographic private key TUSK PQCenc Decrypting the encapsulated ciphertext tct yields the temporary shared key tss. Using the temporary shared key tss, the quantum-resistant ciphertext c is decrypted. PQC Obtain the plaintext m=Dec from the symmetric algorithm Sym (c PQC Extract your own signing certificate (UCer) using tss. sig Encryption certificate UCer enc Quantum-resistant cryptographic private key USK PQCenc Traditional public-key cryptography encrypts the private key USK. GMenc ;

[0051] Among them, Dec Sym () indicates a symmetric algorithm decryption operation, Dec GM () indicates a traditional public-key cryptography decryption operation.

[0052] Furthermore, after the user extracts the signing certificate and encryption certificate of the hybrid signature, they verify its validity.

[0053] When verifying the validity of a hybrid signature certificate, the traditional public key cryptographic signature portion of the hybrid signature certificate is verified using the verification methods of the existing commercial cryptographic digital certificate system. Then, the quantum-resistant cryptographic signature public key of the certificate authority's hybrid signature self-signed certificate is obtained from the certificate chain, and the quantum-resistant cryptographic signature portion of the hybrid signature certificate is verified. When both signatures are verified successfully, the hybrid signature certificate is considered valid.

[0054] When verifying the validity of a hybrid-signed encryption certificate, the traditional public-key cryptographic signature portion of the hybrid-signed encryption certificate is verified using the verification methods of the existing commercial cryptographic digital certificate system. Then, the quantum-resistant cryptographic signature public key of the certificate authority's hybrid-signed self-signed certificate is obtained from the certificate chain, and the quantum-resistant cryptographic signature portion of the hybrid-signed encryption certificate is verified. When both signatures are verified successfully, the hybrid-signed encryption certificate is considered valid.

[0055] As can be seen from the above technical solution, compared with the prior art, the present invention has the following beneficial effects:

[0056] 1. Compared with existing commercial cryptographic digital certificate systems, this invention incorporates a quantum-resistant algorithm, which enhances the security of the generated digital certificate in a quantum attack environment, eliminates the risk of certificate forgery, and avoids the threat of man-in-the-middle attacks.

[0057] 2. The quantum-resistant digital certificate generated by this invention is compatible with existing digital certificates. It is applicable not only to quantum-resistant environments but also to environments that do not currently support quantum-resistant algorithms, avoiding the incompatibility issues associated with directly upgrading to a quantum-resistant digital certificate. It can be used in cryptographic products such as gateways, cryptographic cards, cryptographic machines, and CAs to resist the threat of quantum attacks. Attached Figure Description

[0058] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0059] Figure 1 A flowchart illustrating the method for generating commercial cryptographic digital certificates that support quantum-resistant cryptography, as provided by this invention. Detailed Implementation

[0060] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0061] like Figure 1 As shown in the figure, this invention discloses a method for generating commercial cryptographic digital certificates that support quantum-resistant cryptography, including the following steps:

[0062] S1. The certificate authority generates a hybrid signature self-signed certificate that simultaneously possesses quantum-resistant cryptographic signature and traditional public-key cryptographic signature;

[0063] S2. The user generates a hybrid signature certificate request file and sends it to the certificate authority;

[0064] S3. The certificate authority verifies the hybrid signature certificate request file and, upon successful verification, generates a user signature certificate that simultaneously possesses a quantum-resistant cryptographic signature and a traditional public-key cryptographic signature.

[0065] S4. The key generation center generates the user's traditional public-key cryptography encryption key pair and the user's quantum-resistant cryptography encryption key pair, and returns them to the certificate authority.

[0066] S5. The certificate authority generates a user encryption certificate with a hybrid signature that combines quantum-resistant cryptographic signature and traditional public-key cryptographic signature.

[0067] S6. The certificate authority generates a hybrid encryption private key and a hybrid encryption public key based on the traditional public key cryptography encryption key pair and the quantum cryptography encryption key pair. It generates private key encrypted ciphertext and hybrid ciphertext based on the user signature certificate, the user encryption certificate and the random symmetric algorithm key, and sends the hybrid encryption public key, private key encrypted ciphertext and hybrid ciphertext to the user.

[0068] S7. The user extracts the signature certificate, encryption certificate, quantum-resistant cryptographic private key, and traditional public-key cryptographic private key of the hybrid signature, and verifies the signature certificate and encryption certificate.

[0069] The steps described above will be further described below.

[0070] S1. Certificate Authorities (CAs) possess two types of keys: traditional public-key cryptography signature key pairs (CASKs). GMsig CAPK GMsig ) and quantum-resistant cryptographic signature key pairs (CASK) PQCsig CAPK PQCsig );

[0071] Among them, CASK GMsig This refers to the Certificate Authority's traditional public-key cryptographic signature private key, CAPK. GMsig The Certificate Authority's traditional public-key cryptographic signature public key, CASK PQCsig This indicates the certificate authority's quantum-resistant cryptographic signature private key, CAPK. PQCsig This indicates the public key for quantum-resistant cryptographic signatures issued by the certificate authority;

[0072] Certificate Authorities (CAs) sign their own traditional public-key cryptographic public keys using CAPK. GMsig The quantum-resistant cryptographic signature public key CAPK is placed in the public key field of the certificate. PQCsig Place it in the extension of the certificate to be signed message;

[0073] Using your own quantum-resistant cryptographic signature private key CASK PQCsig Perform quantum-resistant cryptographic signing (CAsig) on ​​the message tb to be signed for the certificate. PQC =Sign PQC (tb, CASK) PQCsig The signature result CAsig PQC Place it in the extension of the certificate to be signed message;

[0074] Update the message to be signed to tb new Certificate Authorities (CAs) utilize traditional public-key cryptography and private-key cryptography (CASK). GMsig The message tb for the certificate to be signed new Perform traditional public-key cryptographic signatures CAsig GM =Sign GM (tb new CASK GMsig The signature result CAsig GM When placed in the signature section of the certificate, a hybrid signature self-signed certificate is generated that simultaneously possesses quantum-resistant cryptographic signature and traditional public-key cryptographic signature.

[0075] Among them, CAsig PQC CAsig represents the quantum-resistant cryptographic signature result of the certificate issuing authority's self-signed certificate. GM Sign represents the traditional public-key cryptographic signature result of a certificate issued by a certificate authority. PQC () indicates a quantum-resistant cryptographic signature operation, Sign GM () indicates a traditional public-key cryptographic signature operation.

[0076] S2. Users generate their own traditional public-key cryptographic signature key pairs (USK). GMsig UPK GMsig Quantum-resistant cryptographic signature key pairs (USK) PQCsig UPK PQCsig ) and quantum-resistant cryptographic temporary key pairs (TUSK) PQCenc TUPK PQCenc );

[0077] Among them, USK GMsig UPK represents the user's traditional public-key cryptographic signature private key. GMsig This represents the user's traditional public-key cryptographic signing public key, USK. PQCsig UPK represents the user's quantum-resistant cryptographic signature private key. PQCsig TUSK represents the user's quantum-resistant cryptographic signature public key. PQCenc This indicates that the user's quantum-resistant cryptographic temporary private key is encrypted using TUPK. PQCenc This indicates that the user's temporary public key is encrypted using quantum-resistant cryptography.

[0078] The user uses their own identity information as the UID to calculate the hybrid public key UPK. mix =UPK GMsig ||UPK PQCsig ||TUPK PQCenc Calculate the user signature message um=UPK Mix ||UID; using its own quantum-resistant cryptographic signature private key USK PQCsigGenerate quantum-resistant cryptographic signatures sig against um PQC =Sign PQC (um, USK PQCsig Using traditional public-key cryptography to sign the private key USK GMsig Generate a traditional public-key cryptographic signature for um using sig. GM =Sign GM (um, USK GMsig ), generate a mixed signature sig for um mix = sig PQC ||sig GM Combine the user-signed message um with the mixed signature sig mix Generate Hybrid Signature Certificate Request File (CSR) mix Send to the certificate authority;

[0079] Where || represents the join operation, sig PQC sig represents the user's quantum-resistant cryptographic signature result. GM This represents the result of a user's traditional public-key cryptographic signature.

[0080] S3. The Certificate Authority receives the user's Hybrid Signature Certificate Request (CSR) file. mix Next, start with the hybrid signature certificate request file (CSR) sent by the user. mix Extract the user's traditional public key cryptographic signature public key UPK. GMsig Quantum-resistant cryptographic signature public key UPK PQCsig Quantum-resistant cryptographic temporary public key TUPK PQCenc User identity information (UID), quantum-resistant cryptographic signature (SIG) PQC and traditional key signature SIG GM ;

[0081] Then, using the quantum-resistant cryptographic signature public key UPK PQCsig Verify quantum-resistant cryptographic signatures sig PQC Validity a=Verify PQC (sig PQC ,UPK Mix ||UID, UPK PQCsig Using traditional public-key cryptography to sign public keys UPK GMsig Verify traditional key signature sig GM Validity b = Verify GM (sig GM ,UPK Mix ||UID, UPK GMsig If both a and b are true, the verification passes and the certificate authority continues with the next steps; otherwise, the certificate authority exits the user certificate generation step.

[0082] Among them, Verify PQC () represents the verification operation for quantum-resistant cryptographic signatures, Verify. GM () indicates the verification operation of traditional public-key cryptographic signatures.

[0083] After successful verification, the certificate authority will send the traditional public-key cryptographic signature public key UPK. GMsig Place the quantum-resistant cryptographic signing public key UPK in the public key field of the user signing certificate. PQCsig The user identity information is placed in the extended field of the certificate and combined with the user identity information in the hybrid signature certificate request file (CSR) to generate the user signature certificate to be signed message (utb).

[0084] Using your own quantum-resistant cryptographic signature private key CASK PQCsig Perform quantum-resistant cryptographic signing on the message to be signed (utb) of the user signature certificate to generate a quantum-resistant signature (usig) for the user signature certificate. PQC =Sign PQC (utb, CASK PQCsig ), signature result usig PQC Place it in the extension of the message to be signed in the signing certificate;

[0085] Update the message to be signed to utb new =utb||usig PQC Using traditional public-key cryptography and private key CASK GMsig UTB message to be signed for the signing certificate new Perform traditional public-key cryptographic signing and generate a user signature certificate. (Traditional signing using USIG) GM =Sign GM (utb new CASK GMsig ), signature result usig GM Placed in the signature section of the signature certificate, it generates a hybrid signature certificate for users that combines quantum-resistant cryptographic signatures and traditional public-key cryptographic signatures. (UCer) sig .

[0086] S4. The Certificate Authority requests the user's traditional public-key cryptography SM2 encryption key pair (USK) from the Key Generation Center (KMC). SM2enc UPK SM2enc User-encapsulated quantum quantum cryptography Kyber key (USK) Kyberenc UPK Kyberenc ).

[0087] After receiving the request, the key generation center runs a traditional public-key cryptography key generation algorithm to generate a traditional public-key cryptography encryption key pair (USK) for the user. GMencUPK GMenc ), and run the quantum-resistant cryptographic key generation algorithm to generate quantum-resistant cryptographic key pairs (USK). PQCenc UPK PQCenc ), and will use the user's two private keys USK GMenc With USK PQCenc Save it, and at the same time, (USK) GMenc UPK GMenc ) and (USK PQCenc UPK PQCenc It is sent to the certificate authority via a secure channel;

[0088] Among them, USK GMenc UPK represents the user's traditional public-key cryptography encryption of their private key. GMenc This represents the user's traditional public-key cryptography public key, USK. PQCenc UPK represents the user's quantum-resistant cryptographic private key. PQCsig This represents the user's quantum-resistant cryptographic public key.

[0089] S5. The Certificate Authority receives two key pairs from the Key Generation Center and encrypts the public key UPK using traditional public-key cryptography. GMenc Place the quantum-resistant cryptographic public key UPK in the public key field of the encryption certificate. PQCenc The extended fields of the encryption certificate, combined with the user identity information in the hybrid signature certificate request file, generate the unsigned message utb for the encryption certificate. enc ;

[0090] Using your own quantum-resistant cryptographic signature private key CASK PQCsig UTB message for unsigned encryption certificate enc Perform quantum-resistant cryptographic signatures and generate quantum-resistant signatures for user encryption certificates (usig) PQCenc =Sign PQC (utb enc CASK PQCsig ), signature result usig PQCenc Place it in the extension of the message to be signed for the encrypted certificate;

[0091] Update the message to be signed to utb enc_new Using traditional public-key cryptography and private key CASK GMsig UTB message for unsigned encryption certificate enc_new Perform traditional public-key cryptographic signing to generate user encryption certificate traditional signature usig GMenc = Sign GM (utb enc_new CASK GMsig ), signature result usig GMencPlaced in the signature section of the encryption certificate, it generates a hybrid signature for the user, possessing both quantum-resistant cryptographic signatures and traditional public-key cryptographic signatures. (UCer) enc .

[0092] S6. The Certificate Authority generates a hybrid encrypted private key, USK. mix =USK GMenc ||USK PQCenc With hybrid encryption public key UPK mix = UPK GMenc ||UPK PQCenc Using quantum-resistant cryptography to encrypt temporary public keys TUPK PQCenc Run the encryption algorithm to generate a quantum-resistant cryptographic temporary ciphertext tct and a temporary shared key tss, and use tss as the symmetric algorithm key;

[0093] Computational symmetric algorithm plaintext m=USK mix ||UCer sig ||UCer enc Calculate quantum-resistant ciphertext c PQC =Enc Sym (m,tss);

[0094] Randomly select a symmetric algorithm key K, and then use the quantum-resistant ciphertext c. PQC As plaintext for a symmetric algorithm, calculate the ciphertext c using the private key. SK =Enc Sym (c PQC , K);

[0095] Using the user's traditional public-key cryptography to sign the public key UPK GMsig Encrypt the symmetric algorithm key K to generate the symmetric algorithm key encrypted ciphertext c. K =Enc GM (K,UPK GMsig ), generating mixed ciphertext c mix =c K ||tct;

[0096] Among them, Enc Sym () denotes a symmetric encryption operation, Enc GM () indicates a traditional public-key cryptography encryption operation.

[0097] Afterwards, the certificate authority will mix the public key UPK. mix Private key encrypts ciphertext c SK With mixed ciphertext c mix Send to the user.

[0098] S7, The user receives the hybrid public key UPK. mix Private key encrypts ciphertext cSK With mixed ciphertext c mix Next, the signature certificate, encryption certificate, quantum-resistant cryptographic private key, and traditional public-key cryptographic private key are extracted. The specific process includes:

[0099] User extracts quantum-resistant cryptographic public key UPK PQCenc Traditional public-key cryptography encrypts public key UPK GMenc Symmetric algorithm key encryption of ciphertext c K Temporary quantum-resistant cryptographic key encapsulation of ciphertext tct;

[0100] Using your own traditional public-key cryptography to sign public key USK GMsig Decrypting symmetric algorithm encrypted ciphertext c K Obtain the symmetric algorithm key K=Dec GM (K, USK GMsig Using a symmetric algorithm with key K, the ciphertext c encrypted with the private key is decrypted. SK Obtain quantum-resistant ciphertext c PQC =Dec Sym (c SK , K);

[0101] Using its own temporary quantum-resistant cryptographic private key TUSK PQCenc Decrypting the encapsulated ciphertext tct yields the temporary shared key tss. Using the temporary shared key tss, the quantum-resistant ciphertext c is decrypted. PQC Obtain the plaintext m=Dec from the symmetric algorithm Sym (c PQC Extract your own signing certificate (UCer) using tss. sig Encryption certificate UCer enc Quantum-resistant cryptographic private key USK PQCenc Traditional public-key cryptography encrypts the private key USK. GMenc ;

[0102] Among them, Dec Sym () indicates a symmetric algorithm decryption operation, Dec GM () indicates a traditional public-key cryptography decryption operation.

[0103] Afterwards, the user verifies the validity of the extracted mixed signature certificate and encryption certificate;

[0104] When verifying the validity of a hybrid signature certificate, the traditional public key cryptographic signature portion of the hybrid signature certificate is verified using the verification methods of the existing commercial cryptographic digital certificate system. Then, the quantum-resistant cryptographic signature public key of the certificate authority's hybrid signature self-signed certificate is obtained from the certificate chain, and the quantum-resistant cryptographic signature portion of the hybrid signature certificate is verified. When both signatures are verified successfully, the hybrid signature certificate is considered valid.

[0105] When verifying the validity of a hybrid-signed encryption certificate, the traditional public-key cryptographic signature portion of the hybrid-signed encryption certificate is verified using the verification methods of the existing commercial cryptographic digital certificate system. Then, the quantum-resistant cryptographic signature public key of the certificate authority's hybrid-signed self-signed certificate is obtained from the certificate chain, and the quantum-resistant cryptographic signature portion of the hybrid-signed encryption certificate is verified. When both signatures are verified successfully, the hybrid-signed encryption certificate is considered valid.

[0106] Specifically, taking the validity verification of a hybrid signature certificate as an example, the user first obtains the traditional public-key cryptographic signature public key CAPK from the CA self-signature certificate. GMsig Then, the signature message of the signature certificate is extracted, and the traditional public-key cryptographic signature portion of the signature certificate is verified using a traditional public-key algorithm. Next, the user obtains the quantum-resistant cryptographic signature public key CAPK from the CA's self-signed certificate. PQCsig Then, the signature message from the signature certificate is extracted, the quantum-resistant signature extension is removed from the signature message in the signature certificate, and the signature message of the signature certificate is updated. This is then combined with the quantum-resistant cryptographic signature public key CAPK. PQCsig The updated signature message is verified using a quantum-resistant public-key algorithm to validate the quantum-resistant cryptographic signature portion of the signature certificate. When both signatures pass verification simultaneously, the mixed signature certificate is considered valid.

[0107] The following descriptions use the Dilithium quantum-resistant cryptographic signature algorithm, the Kyber quantum-resistant cryptographic key encapsulation algorithm, the SM2 traditional public-key cryptographic signature algorithm, the SM2 traditional public-key cryptographic encryption algorithm, and the SM4 symmetric algorithm as examples to illustrate the above methods.

[0108] S1 and CA have two types of keys: a traditional public-key cryptography SM2 signature key pair (CASK). SM2sig CAPK SM2sig ) and quantum-resistant cryptographic Dilithium signature key pair (CASK) Dilithiumsig CAPK Dilithiumsig ).

[0109] Among them, CASK SM2sig This represents the CA's traditional public-key cryptography SM2 signature private key, CAPK. SM2sig This represents the CA's traditional public-key cryptography SM2 signature public key, CASK.Dilithiumsig This represents the CA quantum-resistant Dilithium signature private key, CAPK. Dilithiumsig This represents the CA quantum-resistant Dilithium signature public key.

[0110] CA first uses its traditional public-key cryptography SM2 signing public key CAPK. SM2sig The public key field of the certificate contains the quantum-resistant Dilithium signature public key CAPK. Dilithiumsig Place it in the extension of the certificate to be signed message, and then use your own quantum-resistant cryptographic private key CASK to sign it. Dilithiumsig Perform quantum-resistant cryptographic signing (sig) on ​​the message tb to be signed for the certificate. Dilithium =Sign Dilithium (tb, CASK Dilithiumsig ), signature result sig Dilithium Place it in the extension of the certificate to be signed message. Then, update the to-be-signed message to tb. new CAs utilize traditional public-key cryptography and private-key CASK. SM2sig The message tb for the certificate to be signed new Perform traditional public-key cryptographic signatures sig SM2 =Sign SM2 (tb new CASK SM2sig ), signature result sig SM2 This is placed in the signature section of the certificate, thus generating a hybrid signature certificate that simultaneously possesses quantum-resistant cryptographic signatures and traditional public-key cryptographic signatures.

[0111] Among them, Sign Dilithium () represents a quantum-resistant Dilithium signature operation, Sign SM2 () indicates a traditional public-key cryptography SM2 signature operation.

[0112] S2. Users generate their own traditional public-key cryptographic signature key pairs (USK). SM2sig UPK SM2sig Quantum-resistant cryptographic signature key pairs (USK) Dilithiumsig UPK Dilithiumsig Temporary quantum-resistant cryptographic key encapsulation key pair (TUSK) Kyberenc TUPK Kyberenc ).

[0113] Among them, USK SM2sig This represents the user's traditional public-key cryptography SM2 signing private key, UPK. SM2sig This represents the user's traditional public-key cryptography SM2 signing public key, USK. Dilithiumsig UPK represents the user's quantum-resistant Dilithium-signed private key.Dilithiumsig This represents the user's quantum-resistant Dilithium signature public key, TUSK. Kyberenc TUPK indicates that the user's quantum-resistant cryptographic key encapsulates a temporary private key. Kyberenc This indicates that the user's quantum-resistant cryptographic key is encapsulated in a temporary public key.

[0114] The user uses their own identity information as the UID to calculate the hybrid public key UPK. mix =UPK SM2sig ||UPK Dilithiumsig ||TUPK Kyberenc Calculate the user signature message um=UPK Mix ||UID, using its own quantum-resistant Dilithium-signed private key USK Dilithiumsig Generate quantum-resistant cryptographic signatures sig for m Dilithium =Sign Dilithium (m, USK Dilithiumsig Using traditional public-key cryptography to sign the private key USK SM2sig Generate a traditional public-key cryptographic SM2 signature sig for m SM2 =Sign SM2 (m,USK SM2sig This generates a hybrid signature sig for m. mix = sig Dilithium ||sig SM2 Combine the user-signed message um with the mixed signature sig mix Generate Hybrid Signature Certificate Request File (CSR) mix and CSR mix Send to CA.

[0115] Where || represents the join operation, Sign Dilithium () represents a quantum-resistant Dilithium signature operation, Sign SM2 () indicates a traditional public-key cryptography SM2 signature operation.

[0116] S3. Received the user's Hybrid Signature Certificate Request File (CSR) mix Then, the CA first extracts the user's hybrid public key (UPK) from the CSR file. mix Traditional public-key cryptography SM2 signature public key UPK SM2sig Quantum-resistant cryptography, Dilithium signature public key UPK Dilithiumsig User identity information (UID), quantum-resistant cryptographic signature (SIG) Dilithium and traditional key signature SIG SM2 Using public key UPK Dilithiumsig Verify signature sig Dilithium Validity a=VerifyDilithium (sig Dilithium ,UPK Mix ||UID,UPK Dilithiumsig Using public key UPK SM2sig Verify signature sig SM2 Validity b = Verify SM2 (sig SM2 ,UPK Mix ||UID,UPK SM2sig The verification will only pass if both a and b are true, and the CA will continue with the next steps. Otherwise, the CA will exit the user certificate generation step and will not continue with the next steps.

[0117] Among them, Verify Dilithium () represents the verification operation for quantum-resistant Dilithium signatures. SM2 () indicates the verification operation of the traditional public-key cryptography SM2 signature.

[0118] Afterwards, the CA will use the traditional public-key cryptographic signature public key UPK. SM2sig The quantum-resistant Dilithium signing public key UPK is placed in the public key field of the user signing certificate. Dilithiumsig The extended fields of the user signing certificate, combined with user identity information from the CSR file, generate the unsigned message UTB for the user signing certificate. Then, it uses its own quantum-resistant Dilithium signing private key, CASK, to sign the message. Dilithiumsig Perform a quantum-resistant Dilithium signature on the message to be signed (utb) of the user signature certificate to generate a quantum-resistant signature (usig) for the user signature certificate. Dilithium =Sign Dilithium (utb,CASK Dilithiumsig ), signature result usig Dilithium Place it in the extension of the user signing certificate pending signature message. Then, update the pending signature message to utb. new =utb||usig Dilithium Using traditional public-key cryptography SM2 to sign the private key CASK SM2sig UTB message to be signed for the signing certificate new Perform traditional public-key cryptography SM2 signing to generate a user signature certificate using traditional signing (usig). SM2 =Sign SM2 (utb new CASK SM2sig ), signature result usig SM2 This is placed in the signature section of the user's signature certificate, thus generating a hybrid signature certificate for the user that simultaneously possesses quantum-resistant cryptographic signatures and traditional public-key cryptographic signatures.sig .

[0119] S4. The CA requests the user's traditional public-key cryptography SM2 encryption key pair (USK) from the Key Generation Center (KMC). SM2enc ,UPK SM2enc User-encapsulated quantum quantum cryptography Kyber key (USK) Kyberenc UPK Kyberenc ).

[0120] After receiving the request from the CA, the KMC runs the traditional public-key cryptography SM2 key generation algorithm to generate a traditional public-key cryptography encryption key pair (USK) for the user. SM2enc UPK SM2enc It then runs a quantum-resistant Kyber key encapsulation key generation algorithm to generate quantum-resistant Kyber key encapsulation key pairs (USK). Kyberenc UPK Kyberenc ), and will use the user's two private keys USK SM2enc With USK Kyberenc Save it, and at the same time, (USK) SM2enc UPK SM2enc ) and (USK Kyberenc UPK Kyberenc It is sent to the CA via a secure channel.

[0121] Among them, USK SM2enc This represents the user's traditional public-key cryptography SM2 encrypted private key, UPK. SM2enc This represents the user's traditional public-key cryptography SM2 encryption public key, USK. Kyberenc UPK indicates that the user's private key is encapsulated in a quantum-resistant Kyber key. Kyberenc This indicates that the user's public key is encapsulated in a quantum-resistant Kyber key.

[0122] S5 and CA receive two key pairs from KMS and encrypt the public key UPK using the traditional public-key cryptography SM2. SM2enc The public key UPK is encapsulated within the public key field of the user's encryption certificate using a quantum-resistant Kyber key. Kyberenc The extended fields of the user encryption certificate, combined with user identity information from the CSR file, generate the unsigned message utb for the user encryption certificate. enc Then, using its own quantum-resistant Dilithium signature private key, CASK Dilithiumsig UTB message for user encryption certificate to be signed enc Perform quantum-resistant Dilithium signature to generate a quantum-resistant signature for the user's cryptographic certificate, usig. Dilithiumenc =Sign Dilithium (utb encCASK Dilithiumsig ), signature result usig Dilithiumenc Place it in the extension of the user's cryptographic certificate pending signature message. Then, update the pending signature message to utb. enc_new Using traditional public-key cryptography SM2 to sign the private key CASK SM2sig UTB message for unsigned encryption certificate enc_new Perform traditional public-key cryptographic signing to generate user encryption certificate traditional signature usig SM2enc = Sign SM2 (utb enc_new CASK SM2sig ), signature result usig SM2enc This is placed in the signature section of the user's encryption certificate, thus generating a hybrid signature for the user's UCer encryption certificate that simultaneously possesses a quantum-resistant cryptographic signature and a traditional public-key cryptographic signature. enc .

[0123] S6, CA generates a hybrid private key USK mix = USK SM2enc ||USK Kyberenc With mixed public key UPK mix = UPK SM2enc ||UPK Kyberenc TUPK public key encapsulated using user-temporary quantum-resistant Kyber key PQCenc Run the key encapsulation algorithm to generate a user-temporary quantum-resistant cryptographic key-encapsulated ciphertext tct and a temporary shared key tss. Use tss as the symmetric algorithm key. Calculate the symmetric algorithm plaintext m = USK. mix ||UCer sig ||UCer enc Calculate quantum-resistant ciphertext c PQC =Enc SM4 (m, tss); Subsequently, CA randomly selects a symmetric algorithm key K, and then... PQC As plaintext for a symmetric algorithm, calculate the ciphertext c using the private key. SK =Enc SM4 (c PQC , K); using the user's traditional public-key cryptography SM2 signature public key UPK SM2sig The symmetric algorithm key K is used for encryption to generate ciphertext c encrypted with the symmetric algorithm key. K =Enc SM2 (K,UPK SM2sig This generates the mixed ciphertext c. mix =c K ||tct.

[0124] Among them, Enc SM4() denotes the SM4 symmetric encryption algorithm. Enc SM2 () indicates a traditional public-key cryptography SM2 encryption operation.

[0125] Then, the CA will mix the public key UPK. mix Private key encrypts ciphertext c SK With mixed ciphertext c mix Send to the user.

[0126] S7. User extracts the quantum-resistant Kyber key and encapsulates the public key UPK. Kyberenc Traditional public-key cryptography, Kyber encryption, and UPK public-key cryptography. SM2enc Symmetric algorithm key encryption of ciphertext c K The user temporarily encapsulates the ciphertext tct using a Kyber key, a quantum-resistant cryptosystem. First, the user signs the public key USK using their own traditional public-key cryptosystem SM2. SM2sig Decrypting C K Obtain the symmetric algorithm key K=Dec SM2 (K,USK SM2sig Using K to decrypt the private key encrypted with ciphertext c SK Obtain quantum-resistant ciphertext c PQC =Dec SM4 (c SK , K) uses its own temporary quantum-resistant Kyber key to encapsulate the private key TUSK. Kyberenc Decrypting the ciphertext tct yields the temporary shared key tss, which is then used to decrypt c. PQC Obtain the plaintext m=Dec from the symmetric algorithm SM4 (c PQC (, tss), thereby extracting their own signing certificate UCer sig Encryption certificate UCer enc Quantum-resistant cryptographic key encapsulation of private key USK Kyberenc Traditional public-key cryptography encrypts the private key USK. SM2enc .

[0127] Among them, Dec SM4 () indicates the SM4 symmetric algorithm decryption operation, Dec SM2 () indicates a traditional public-key cryptography SM2 decryption operation.

[0128] When a user verifies the validity of a signature certificate, the traditional public-key cryptographic signature portion of the certificate is first verified using the CA's traditional public-key cryptographic signature private key, and then the quantum-resistant cryptographic signature portion of the certificate is verified using the CA's quantum-resistant cryptographic signature private key. Only when both signatures are verified successfully is the signature certificate considered valid.

[0129] When a user verifies the validity of an encryption certificate, the traditional public-key cryptographic signature portion of the encryption certificate is first verified using the CA's traditional public-key cryptographic signature private key, and then the quantum-resistant cryptographic signature portion of the encryption certificate is verified using the CA's quantum-resistant cryptographic signature private key. Only when both signatures are verified successfully is the certificate considered valid.

[0130] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the apparatus disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the description is relatively simple; relevant parts can be referred to the method section.

[0131] The above description of the disclosed embodiments enables those skilled in the art to make or use the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the invention is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for generating commercial cryptographic digital certificates supporting quantum-resistant cryptography, characterized in that, Includes the following steps: The certificate authority generates a hybrid signature self-signed certificate that combines quantum-resistant cryptographic signatures with traditional public-key cryptographic signatures; The user generates a hybrid signature certificate request file and sends it to the certificate authority; The certificate authority verifies the hybrid signature certificate request file and, upon successful verification, generates a user signature certificate that simultaneously possesses a quantum-resistant cryptographic signature and a traditional public-key cryptographic signature. The key generation center generates the user's traditional public-key cryptography encryption key pair and the user's quantum-resistant cryptography encryption key pair, and returns them to the certificate authority; Certificate authorities generate user encryption certificates that possess a hybrid signature that combines quantum-resistant cryptographic signatures with traditional public-key cryptographic signatures; The certificate authority generates a hybrid encryption private key and a hybrid encryption public key based on traditional public-key cryptography encryption key pairs and quantum cryptography encryption key pairs. It generates private key encrypted ciphertext and hybrid ciphertext based on the user's signature certificate, user encryption certificate, and random symmetric algorithm key, and sends the hybrid encryption public key, private key encrypted ciphertext, and hybrid ciphertext to the user. Users extract the hybrid signature's signature certificate, encryption certificate, quantum-resistant cryptographic private key, and traditional public-key cryptographic private key, and verify the signature certificate and encryption certificate; The process by which a certificate authority generates a hybrid encryption public key, a private key-encrypted ciphertext, and a hybrid ciphertext includes: Certificate Authority generates hybrid encryption private key (USK) mix =USK GMenc ||USK PQCenc With hybrid encryption public key UPK mix =UPK GMenc ||UPK PQCenc Using quantum-resistant cryptography to encrypt temporary public keys TUPK PQCenc Run the encryption algorithm to generate a quantum-resistant cryptographic temporary ciphertext tct and a temporary shared key tss, using tss as the symmetric algorithm key; where (USK) GMenc UPK GMenc ) represents a traditional public-key cryptography encryption key pair, (USK) PQCenc UPK PQCenc ) represents a quantum-resistant cryptographic key pair; Computational symmetric algorithm plaintext m=USK mix ||UCer sig ||UCer enc Calculate quantum-resistant ciphertext c PQC =Enc Sym (m, tss); UCer sig This refers to a signature certificate that simultaneously possesses a hybrid signature combining quantum-resistant cryptographic signatures and traditional public-key cryptographic signatures, UCer enc This refers to an encryption certificate that simultaneously possesses a hybrid signature combining quantum-resistant cryptographic signatures and traditional public-key cryptographic signatures. Randomly select a symmetric algorithm key K, and then use the quantum-resistant ciphertext c. PQC As plaintext for a symmetric algorithm, calculate the ciphertext c using the private key. SK =Enc Sym (c PQC ,K); Using the user's traditional public-key cryptography to sign the public key UPK GMsig Encrypt the symmetric algorithm key K to generate the symmetric algorithm key encrypted ciphertext c. K =Enc GM (K,UPK GMsig ), generating mixed ciphertext c mix =c K ||tct; Among them, Enc Sym () denotes a symmetric encryption operation, Enc GM () represents a traditional public-key cryptography encryption operation; The process by which a user extracts the signing certificate, encryption certificate, quantum-resistant cryptographic private key, and traditional public-key cryptographic private key includes: User extracts quantum-resistant cryptographic public key UPK PQCenc Traditional public-key cryptography encrypts public key UPK GMenc Symmetric algorithm key encryption of ciphertext c K Temporary quantum-resistant cryptographic key encapsulation of ciphertext tct; Using your own traditional public-key cryptography to sign public key USK GMsig Decrypting symmetric algorithm encrypted ciphertext c K Obtain the symmetric algorithm key K=Dec GM (K, USK GMsig Using a symmetric algorithm with key K, the ciphertext c encrypted with the private key is decrypted. SK Obtain quantum-resistant ciphertext c PQC =Dec Sym (c SK ,K); Using its own temporary quantum-resistant cryptographic private key TUSK PQCenc Decrypting the encapsulated ciphertext tct yields the temporary shared key tss. Using the temporary shared key tss, the quantum-resistant ciphertext c is decrypted. PQC Obtain the plaintext m=Dec from the symmetric algorithm Sym (c PQC Extract your own signing certificate (UCer) using tss. sig Encryption certificate UCer enc Quantum-resistant cryptographic private key USK PQCenc Traditional public-key cryptography encrypts the private key USK. GMenc ; Among them, Dec Sym () indicates a symmetric algorithm decryption operation, Dec GM () indicates a traditional public-key cryptography decryption operation.

2. The method for generating commercial cryptographic digital certificates supporting quantum-resistant cryptography according to claim 1, characterized in that, The process by which a certificate authority generates a hybrid signature self-certified certificate includes: Certificate Authorities (CAs) possess two types of keys: traditional public-key cryptography signature key pairs (CASKs). GMsig CAPK GMsig ) and quantum-resistant cryptographic signature key pairs (CASK) PQCsig CAPK PQCsig ); Among them, CASK GMsig This refers to the Certificate Authority's traditional public-key cryptographic signature private key, CAPK. GMsig The Certificate Authority's traditional public-key cryptographic signature public key, CASK PQCsig This indicates the certificate authority's quantum-resistant cryptographic signature private key, CAPK. PQCsig This indicates the public key for quantum-resistant cryptographic signatures issued by the certificate authority; Certificate Authorities (CAs) sign their own traditional public-key cryptographic public keys using CAPK. GMsig The quantum-resistant cryptographic signature public key CAPK is placed in the public key field of the certificate. PQCsig Place it in the extension of the certificate to be signed message; Using your own quantum-resistant cryptographic signature private key CASK PQCsig Perform quantum-resistant cryptographic signing (CAsig) on ​​the message tb to be signed for the certificate. PQC =Sign PQC (tb, CASK) PQCsig The signature result CAsig PQC Place it in the extension of the certificate to be signed message; Update the message to be signed to tb new Certificate Authorities (CAs) utilize traditional public-key cryptography and private-key cryptography (CASK). GMsig The message tb for the certificate to be signed new Perform traditional public-key cryptographic signatures CAsig GM =Sign GM (tb new CASK GMsig The signature result CAsig GM When placed in the signature section of the certificate, a hybrid signature self-signed certificate is generated that simultaneously possesses quantum-resistant cryptographic signature and traditional public-key cryptographic signature. Among them, CAsig PQC CAsig represents the quantum-resistant cryptographic signature result of the certificate issuing authority's self-signed certificate. GM Sign represents the traditional public-key cryptographic signature result of a certificate issued by a certificate authority. PQC () indicates a quantum-resistant cryptographic signature operation, Sign GM () indicates a traditional public-key cryptographic signature operation.

3. The method for generating commercial cryptographic digital certificates supporting quantum-resistant cryptography according to claim 2, characterized in that, The process of a user generating a hybrid signature certificate request file includes: Users generate their own traditional public-key cryptographic signature key pairs (USK). GMsig UPK GMsig Quantum-resistant cryptographic signature key pairs (USK) PQCsig UPK PQCsig ) and quantum-resistant cryptographic temporary key pairs (TUSK) PQCenc TUPK PQCenc ); Among them, USK GMsig UPK represents the user's traditional public-key cryptographic signature private key. GMsig This represents the user's traditional public-key cryptographic signing public key, USK. PQCsig UPK represents the user's quantum-resistant cryptographic signature private key. PQCsig TUSK represents the user's quantum-resistant cryptographic signature public key. PQCenc This indicates that the user's quantum-resistant cryptographic temporary private key is encrypted using TUPK. PQCenc This indicates that the user's temporary public key is encrypted using quantum-resistant cryptography. The user uses their own identity information as the UID to calculate the hybrid public key UPK. mix =UPK GMsig ||UPK PQCsig || TUPK PQCenc Calculate the user signature message um=UPK Mix ||UID; using its own quantum-resistant cryptographic signature private key USK PQCsig Generate quantum-resistant cryptographic signatures sig against um PQC =Sign PQC (um, USK PQCsig Using traditional public-key cryptography to sign the private key USK GMsig Generate a traditional public-key cryptographic signature for um using sig. GM =Sign GM (um, USK GMsig ), generate a mixed signature sig for um mix = sig PQC ||sig GM Combine the user-signed message um with the mixed signature sig mix Generate Hybrid Signature Certificate Request File (CSR) mix Send to the certificate authority; Where || represents the join operation, sig PQC sig represents the user's quantum-resistant cryptographic signature result. GM This represents the result of a user's traditional public-key cryptographic signature.

4. The method for generating commercial cryptographic digital certificates supporting quantum-resistant cryptography according to claim 3, characterized in that, The process by which a certificate authority verifies a hybrid signature certificate request file includes: Certificate Authority receives a Hybrid Signature Certificate Request (CSR) file from a user. mix Extract the user's traditional public key cryptographic signature public key UPK. GMsig Quantum-resistant cryptographic signature public key UPK PQCsig Quantum-resistant cryptographic temporary public key TUPK PQCenc User identity information (UID), quantum-resistant cryptographic signature (SIG) PQC and traditional key signature SIG GM ; Using quantum-resistant cryptographic signature public key UPK PQCsig Verify quantum-resistant cryptographic signatures sig PQC Validity a=Verify PQC (sig PQC ,UPK Mix ||UID, UPK PQCsig Using traditional public-key cryptography to sign public keys UPK GMsig Verify traditional key signature sig GM Validity b = Verify GM (sig GM ,UPK Mix ||UID, UPK GMsig If both a and b are true, the verification passes and the certificate authority continues with the next steps; otherwise, the certificate authority exits the user certificate generation step. Among them, Verify PQC () represents the verification operation for quantum-resistant cryptographic signatures, Verify. GM () indicates the verification operation of traditional public-key cryptographic signatures.

5. The method for generating commercial cryptographic digital certificates supporting quantum-resistant cryptography according to claim 4, characterized in that, The process by which a certificate authority generates a user-signed certificate with hybrid signatures includes: Certificate Authorities (CAs) use traditional public-key cryptography to sign public keys (UPKs). GMsig Place the quantum-resistant cryptographic signing public key UPK in the public key field of the user signing certificate. PQCsig The user identity information is placed in the extended field of the certificate and combined with the user identity information in the hybrid signature certificate request file (CSR) to generate the user signature certificate to be signed message (utb). Using your own quantum-resistant cryptographic signature private key CASK PQCsig Perform quantum-resistant cryptographic signing on the message to be signed (utb) of the user signature certificate to generate a quantum-resistant signature (usig) for the user signature certificate. PQC =Sign PQC (utb, CASK PQCsig ), signature result usig PQC Place it in the extension of the message to be signed in the signing certificate; Update the message to be signed to utb new =utb||usig PQC Using traditional public-key cryptography and private key CASK GMsig UTB message to be signed for the signing certificate new Perform traditional public-key cryptographic signing and generate a user signature certificate. (Traditional signing using USIG) GM =Sign GM (utb new CASK GMsig ), signature result usig GM Placed in the signature section of the signature certificate, it generates a hybrid signature certificate for users that combines quantum-resistant cryptographic signatures and traditional public-key cryptographic signatures. (UCer) sig .

6. The method for generating commercial cryptographic digital certificates supporting quantum-resistant cryptography according to claim 5, characterized in that, The process by which the key generation center generates traditional public-key cryptography encryption key pairs and quantum-resistant cryptography encryption key pairs for users is as follows: Certificate authorities send key pair generation requests to key generation centers; After receiving the request, the key generation center runs a traditional public-key cryptography key generation algorithm to generate a traditional public-key cryptography encryption key pair (USK) for the user. GMenc UPK GMenc ), and run the quantum-resistant cryptographic key generation algorithm to generate quantum-resistant cryptographic key pairs (USK). PQCenc UPK PQCenc ), and will use the user's two private keys USK GMenc With USK PQCenc Save it, and at the same time, (USK) GMenc UPK GMenc ) and (USK PQCenc UPK PQCenc It is sent to the certificate authority via a secure channel; Among them, USK GMenc UPK represents the user's traditional public-key cryptography encryption of their private key. GMenc This represents the user's traditional public-key cryptography public key, USK. PQCenc UPK represents the user's quantum-resistant cryptographic private key. PQCsig This represents the user's quantum-resistant cryptographic public key.

7. The method for generating commercial cryptographic digital certificates supporting quantum-resistant cryptography according to claim 6, characterized in that, The process by which a certificate authority generates a user encryption certificate is as follows: The certificate authority receives two key pairs from the key generation center and encrypts the public key UPK using traditional public-key cryptography. GMenc Place the quantum-resistant cryptographic public key UPK in the public key field of the encryption certificate. PQCenc The extended fields of the encryption certificate, combined with the user identity information in the hybrid signature certificate request file, generate the unsigned message utb for the encryption certificate. enc ; Using your own quantum-resistant cryptographic signature private key CASK PQCsig UTB message for unsigned encryption certificate enc Perform quantum-resistant cryptographic signatures and generate quantum-resistant signatures for user encryption certificates (usig) PQCenc =Sign PQC (utb enc CASK PQCsig ), signature result usig PQCenc Place it in the extension of the message to be signed for the encrypted certificate; Update the message to be signed to utb enc_new Using traditional public-key cryptography and private key CASK GMsig UTB message for unsigned encryption certificate enc_new Perform traditional public-key cryptographic signing to generate user encryption certificate traditional signature usig GMenc = Sign GM (utb enc_new CASK GMsig ), signature result usig GMenc Placed in the signature section of the encryption certificate, it generates a hybrid signature for the user, possessing both quantum-resistant cryptographic signatures and traditional public-key cryptographic signatures. (UCer) enc .

8. The method for generating commercial cryptographic digital certificates supporting quantum-resistant cryptography according to claim 1, characterized in that, After the user extracts the signing certificate and encryption certificate of the hybrid signature, they verify their validity. When verifying the validity of a hybrid signature certificate, the traditional public key cryptographic signature part of the hybrid signature certificate is verified using the verification method of the existing commercial cryptographic digital certificate system. Then, the quantum-resistant cryptographic signature public key of the certificate authority's hybrid signature self-signed certificate is obtained from the certificate chain, and the quantum-resistant cryptographic signature part of the hybrid signature certificate is verified. When both signatures are verified successfully, the hybrid signature certificate is considered valid. When verifying the validity of a hybrid-signed encryption certificate, the traditional public-key cryptographic signature portion of the hybrid-signed encryption certificate is verified using the verification methods of the existing commercial cryptographic digital certificate system. Then, the quantum-resistant cryptographic signature public key of the certificate authority's hybrid-signed self-signed certificate is obtained from the certificate chain, and the quantum-resistant cryptographic signature portion of the hybrid-signed encryption certificate is verified. When both signatures are verified successfully, the hybrid-signed encryption certificate is considered valid.

Images