Post-quantum and national secret hybrid dual-certificate IKE key negotiation method and device

Abstract

The invention provides a post-quantum and national secret hybrid dual-certificate IKE key negotiation method and device, and relates to the technical field of password application. The method is applied to first-stage negotiation of an initiator, and comprises the following steps: determining that both parties support a hybrid cryptographic algorithm suite by sending a first negotiation packet to a responder and receiving a second negotiation packet sent by the responder, and then determining first key information, first hybrid dual certificates and first hybrid signature data of the initiator based on the hybrid cryptographic algorithm suite, the identity of the initiator is sent to the responder, the responder further verifies the identity of the initiator, generates a first-stage working key of the responder and receives second key information and second mixed signature data determined by the responder based on the mixed cryptographic algorithm suite, and the initiator further verifies the identity of the responder and generates a second-stage working key of the responder. A working key of the first stage of the initiator is generated, identity verification and key negotiation between the initiator and the responder are achieved, and the hybrid cryptographic algorithm suite comprises a post-quantum algorithm and a national cryptographic algorithm.

Description

Technical Field

[0001] The present invention relates to the field of cryptographic application technology, and in particular to a method and device for post-quantum and national secret hybrid dual-certificate IKE key negotiation. Background Art

[0002] With the rapid development of quantum computing, some of its special properties, such as superposition and entanglement, enable quantum computing to complete some tasks that classical computing cannot complete in some cases, such as fast factorization and quantum parallelism. Therefore, asymmetric algorithms based on mathematical problems such as large number decomposition or elliptic curves will be at risk of being cracked, resulting in the risk of leakage of key materials based on asymmetric protection in Internet Key Exchange (IKE) key negotiation, which further leads to the decryption and theft of session keys to be transmitted. Summary of the invention

[0003] The purpose of the present invention is to address the deficiencies in the above-mentioned prior art and provide a method and device for post-quantum and national secret hybrid dual-certificate IKE key negotiation, so as to realize identity authentication and key negotiation between the initiator and the responder based on a hybrid cryptographic algorithm suite.

[0004] To achieve the above purpose, the technical solution adopted in the embodiment of the present application is as follows:

[0005] In a first aspect, an embodiment of the present application provides a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation, which is applied to the first phase negotiation of the initiator, and the method includes:

[0006] Sending a first negotiation package to the responder, the first negotiation package including: a list of cryptographic algorithm suites supported by the initiator, the first negotiation package being used to enable the responder to determine a hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, the hybrid cryptographic algorithm suite being a post-quantum and national secret hybrid algorithm suite;

[0007] Receive a second negotiation package sent by the responder, the second negotiation package comprising: the hybrid cryptographic algorithm suite, and the second hybrid dual certificate of the responder, the second hybrid dual certificate comprising: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information;

[0008] According to the hybrid cryptographic algorithm suite, first key information and first signature data are generated, and a first hybrid dual certificate of the initiator is obtained, wherein the first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite, wherein the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information;

[0009] Sending a third negotiation package to the responder, the third negotiation package including: the first key information, the first hybrid dual certificate and the first hybrid signature data, the third negotiation package being used to enable the responder to verify the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and to generate a first-stage working key for the responder;

[0010] Receive a fourth negotiation packet sent by the responder, the fourth negotiation packet comprising: second key information and second hybrid signature data, the second key information and the second hybrid signature data are respectively information generated by the responder after encryption and signing according to the hybrid cryptographic algorithm suite;

[0011] According to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, the identity of the responder is verified, and the first-stage working key of the initiator is generated.

[0012] In an optional implementation, generating first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtaining a first hybrid dual certificate of the initiator includes:

[0013] Parsing the second negotiation packet to obtain the hybrid cryptographic algorithm suite;

[0014] The hybrid encryption public key of the responder corresponding to the hybrid cryptographic algorithm suite is used as the first encryption public key, wherein the hybrid encryption public key of the responder includes: post-quantum encryption algorithm public key information and national secret encryption algorithm public key information;

[0015] According to the first temporary symmetric key, the first random number of the initiator and the identity information of the initiator are respectively encrypted to obtain a first encrypted ciphertext, wherein the first encrypted ciphertext includes: the first random number ciphertext of the initiator and the identity information ciphertext of the initiator;

[0016] Perform hybrid encryption on the first temporary symmetric key according to the first encryption public key to obtain a first temporary symmetric key ciphertext, wherein the first key information includes: the first encrypted ciphertext and the first temporary symmetric key ciphertext;

[0017] Using the hybrid cryptographic algorithm suite, obtaining a first hybrid dual certificate of the initiator;

[0018] The hybrid signature private key of the initiator corresponding to the hybrid cryptographic algorithm suite is used to perform hybrid signature protection on the initiator's first random number, the initiator's identity information, the first temporary symmetric key and the first hybrid encryption certificate to obtain the first hybrid signature data.

[0019] In an optional implementation, the verifying the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and generating the first-stage working key of the initiator, includes:

[0020] Using the hybrid encryption private key of the initiator corresponding to the hybrid cryptographic algorithm suite as the first decryption private key;

[0021] Decrypting the second temporary symmetric key ciphertext in the second key information according to the first decryption private key to obtain a second temporary symmetric key;

[0022] Decrypting the second encrypted ciphertext in the second key information according to the second temporary symmetric key to obtain the second random number of the responder and the identity information of the responder;

[0023] Using the hybrid signature public key of the responder corresponding to the hybrid cryptographic algorithm suite to authenticate the second hybrid signature data, and obtain an identity authentication result of the responder;

[0024] If the identity authentication result of the responder is successful, a first-stage working key of the initiator is generated according to the second random number of the responder and the first random number of the initiator.

[0025] In a second aspect, an embodiment of the present application further provides a post-quantum and national secret hybrid dual-certificate IKE key negotiation method, which is applied to the first phase negotiation of the responder, and the method includes:

[0026] Receiving a first negotiation packet sent by an initiator, wherein the first negotiation packet includes: a list of cryptographic algorithm suites supported by the initiator;

[0027] Determine a hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list;

[0028] A second negotiation package is sent to the initiator, the second negotiation package comprising: the hybrid cryptographic algorithm suite and the second hybrid dual certificate of the responder, the second hybrid dual certificate comprising: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information, the second negotiation package is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the first hybrid dual certificate of the initiator; the first hybrid dual certificate comprises: a first signature certificate and a first encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information;

[0029] receiving a third negotiation package sent by the initiator, wherein the third negotiation package includes: the first key information, the first hybrid dual certificate, and the first hybrid signature data;

[0030] Verifying the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate;

[0031] Generate second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite;

[0032] A fourth negotiation package is sent to the initiator, and a first-stage working key of the responder is generated, wherein the fourth negotiation package includes: the second key information and the second hybrid signature data, and the fourth negotiation package is used to enable the initiator to verify the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and to generate the first-stage working key of the initiator.

[0033] In an optional implementation, the verifying the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate includes:

[0034] Using the hybrid encryption private key of the responder corresponding to the hybrid cryptographic algorithm suite as the second decryption private key;

[0035] Decrypting the first temporary symmetric key ciphertext in the first key information according to the second decryption private key to obtain a first temporary symmetric key;

[0036] Decrypting the first encrypted ciphertext in the first key information according to the first temporary symmetric key to obtain the first random number of the initiator and the identity information of the initiator;

[0037] Using the hybrid signature public key of the initiator corresponding to the hybrid cryptographic algorithm suite to authenticate the first hybrid signature data, and obtain an identity authentication result of the initiator;

[0038] The generating of the first-stage working key of the responder includes: if the identity authentication result of the initiator is successful, generating the first-stage working key of the responder according to the first random number of the initiator and the second random number of the responder.

[0039] In an optional implementation, generating the second key information and the second hybrid signature data according to the hybrid cryptographic algorithm suite includes:

[0040] The hybrid encryption public key of the initiator corresponding to the hybrid cryptographic algorithm suite is used as the second encryption public key, wherein the hybrid encryption public key of the initiator includes: post-quantum encryption algorithm public key information and national secret encryption algorithm public key information;

[0041] According to the second temporary symmetric key, the second random number of the responder and the identity information of the responder are respectively encrypted to obtain a second encrypted ciphertext, wherein the second encrypted ciphertext includes: the second random number ciphertext of the responder and the identity information ciphertext of the responder;

[0042] Perform hybrid encryption on the second temporary symmetric key according to the second encryption public key to obtain a second temporary symmetric key ciphertext, wherein the second key information includes: the second encrypted ciphertext and the second temporary symmetric key ciphertext;

[0043] The hybrid signature private key of the responder corresponding to the hybrid cryptographic algorithm suite is used to perform hybrid signature protection on the responder's second random number, the responder's identity information, the second temporary symmetric key and the second hybrid encryption certificate to obtain the second hybrid signature data.

[0044] In a third aspect, an embodiment of the present application further provides a device for post-quantum and national secret hybrid dual-certificate IKE key negotiation, which is applied to the first phase negotiation of the initiator, and the device includes:

[0045] A first sending module is used to send a first negotiation package to the responder, wherein the first negotiation package includes: a list of cryptographic algorithm suites supported by the initiator, and the first negotiation package is used to enable the responder to determine a hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, wherein the hybrid cryptographic algorithm suite is a post-quantum and national secret hybrid algorithm suite;

[0046] A first receiving module is configured to receive a second negotiation package sent by the responder, wherein the second negotiation package includes: the hybrid cryptographic algorithm suite, and a second hybrid dual certificate of the responder, wherein the second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated by the hybrid cryptographic algorithm suite, wherein the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information;

[0047] A first generating module is used to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain a first hybrid dual certificate of the initiator, wherein the first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite, wherein the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information;

[0048] The first sending module is further used to send a third negotiation package to the responder, wherein the third negotiation package includes: the first key information, the first hybrid dual certificate and the first hybrid signature data, and the third negotiation package is used to enable the responder to verify the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and generate a first-stage working key of the responder;

[0049] The first receiving module is further used to receive a fourth negotiation package sent by the responder, wherein the fourth negotiation package includes: second key information and second hybrid signature data, wherein the second key information and the second hybrid signature data are respectively information generated by the responder after encryption and signing according to the hybrid cryptographic algorithm suite;

[0050] The first verification module is used to verify the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and to generate a first-stage working key of the initiator.

[0051] In a fourth aspect, an embodiment of the present application further provides a device for post-quantum and national secret hybrid dual-certificate IKE key negotiation, which is applied to the first phase negotiation of the responder, and the device includes:

[0052] A second receiving module is configured to receive a first negotiation packet sent by an initiator, wherein the first negotiation packet includes: a list of cryptographic algorithm suites supported by the initiator;

[0053] A determination module, configured to determine a hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, wherein the hybrid cryptographic algorithm suite is a post-quantum and national secret hybrid algorithm suite;

[0054] A second sending module is used to send a second negotiation package to the initiator, the second negotiation package includes: the hybrid cryptographic algorithm suite and the second hybrid dual certificate of the responder, the second hybrid dual certificate includes: the second hybrid signature certificate and the second hybrid encryption certificate of the responder generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information, the second negotiation package is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the initiator's first hybrid dual certificate; the first hybrid dual certificate includes: the first hybrid signature certificate and the first hybrid encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information;

[0055] The second receiving module is configured to receive a third negotiation package sent by the initiator, wherein the third negotiation package includes: the first key information, the first hybrid dual certificate, and the first hybrid signature data;

[0056] a second verification module, configured to verify the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate;

[0057] A second generating module, used to generate second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite;

[0058] The second sending module is also used to send a fourth negotiation package to the initiator and generate a first-stage working key for the responder. The fourth negotiation package includes: the second key information and the second hybrid signature data. The fourth negotiation package is used to enable the initiator to verify the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and generate the first-stage working key for the initiator.

[0059] The beneficial effects of this application are:

[0060] The embodiment of the present application provides a method and device for post-quantum and national secret hybrid dual certificate IKE key negotiation, which is applied to the first phase negotiation of the initiator. The method includes: sending a first negotiation package to the responder, the first negotiation package includes: a list of cryptographic algorithm suites supported by the initiator, the first negotiation package is used to enable the responder to determine the hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, the hybrid cryptographic algorithm suite is a post-quantum and national secret hybrid algorithm suite, receiving a second negotiation package sent by the responder, the second negotiation package includes: a hybrid cryptographic algorithm suite, and a second hybrid dual certificate of the responder, the second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using the hybrid cryptographic algorithm suite, the second hybrid signature certificate indicates a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the second hybrid encryption certificate indicates an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information, generating first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtaining the first hybrid dual certificate of the initiator, the first hybrid dual certificate includes: using The initiator's first hybrid signature certificate and first hybrid encryption certificate generated by the hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information, sends a third negotiation package to the responder, the third negotiation package includes: first key information, first hybrid dual certificate and first hybrid signature data, the third negotiation package is used to enable the responder to use the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate to verify the identity of the initiator, and generate the first-stage working key of the responder, receive the fourth negotiation package sent by the responder, the fourth negotiation package includes: second key information and second hybrid signature data, the second key information and the second hybrid signature data are respectively information generated by the responder after encryption and signing according to the hybrid cryptographic algorithm suite, according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, the identity of the responder is verified, and the first-stage working key of the initiator is generated.

[0061] The method of the present application determines a hybrid cryptographic algorithm suite supported by both parties by sending a first negotiation package to the responder and receiving a second negotiation package sent by the responder, then determines the initiator's first key information, first hybrid dual certificate and first hybrid signature data based on the hybrid cryptographic algorithm suite, and sends them to the responder, the responder further verifies the identity of the initiator, and generates the responder's first-stage working key, and at the same time, the responder determines the responder's second key information and second hybrid signature data based on the hybrid cryptographic algorithm suite, the initiator further verifies the identity of the responder, and generates the initiator's first-stage working key, thereby realizing identity authentication and key negotiation between the initiator and the responder, wherein the hybrid cryptographic algorithm suite includes a post-quantum algorithm and a national secret algorithm, has anti-quantum characteristics, and prevents the session key from being cracked and stolen. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0063] Figure 1 One of the flow charts of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application;

[0064] Figure 2 A second flowchart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application;

[0065] Figure 3 A flowchart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application is shown in FIG3;

[0066] Figure 4 A flowchart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application;

[0067] Figure 5 A flowchart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application is shown in FIG5 ;

[0068] Figure 6 Flow chart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application, No. 6;

[0069] Figure 7Flow chart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application, No. 7;

[0070] Figure 8 A functional module diagram of a device for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application;

[0071] Fig. 9 A schematic diagram of the functional modules of another device for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application. DETAILED DESCRIPTION

[0072] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments.

[0073] Therefore, the following detailed description of the embodiments of the present application provided in the accompanying drawings is not intended to limit the scope of the present application for which protection is sought, but merely represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0074] In the description of the present application, it should be noted that if the terms "upper", "lower", etc. appear, the orientation or position relationship indicated is based on the orientation or position relationship shown in the drawings, or is the orientation or position relationship in which the product of the application is usually placed when used. It is only for the convenience of describing the present application and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present application.

[0075] In addition, the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0076] It should be noted that, in the absence of conflict, the features in the embodiments of the present application may be combined with each other.

[0077] Currently, the key negotiation between two virtual private network (VPN) devices based on the Internet Protocol Security (Ipsec) in the Internet Key Exchange (IKE) stage is achieved by using the national secret dual certificate system to achieve identity authentication and key negotiation. However, with the development of quantum algorithms, quantum algorithms can crack asymmetric algorithms based on mathematical problems such as large number decomposition or elliptic curves, resulting in the risk of leakage of key materials based on asymmetric protection in IKE key negotiation, which further leads to the deciphering and theft of session keys to be transmitted.

[0078] Therefore, this application provides a method for IKE key negotiation using a post-quantum and national secret hybrid dual certificate. A post-quantum algorithm is introduced on the basis of the national secret algorithm to obtain a hybrid dual certificate. By using a hybrid dual certificate system and combining it with the national secret dual certificate system, identity authentication and key negotiation between the initiator and the responder can be achieved, which can effectively resist the attack of quantum algorithms, avoid the leakage of key materials, and prevent the session key from being cracked and stolen.

[0079] The following is a detailed explanation of the post-quantum and national secret hybrid dual-certificate IKE key negotiation method provided by the embodiment of the present application through specific examples in conjunction with the accompanying drawings. Applied to the first phase of negotiation on the initiator, Figure 1 One of the flow charts of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application; Figure 1 As shown, the method includes:

[0080] S101. Send a first negotiation packet to a responder.

[0081] In this embodiment, the first negotiation package includes: a list of cryptographic algorithm suites supported by the initiator, and the first negotiation package is used to enable the responder to determine the hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, and the hybrid cryptographic algorithm suite is a post-quantum and national encryption hybrid algorithm suite.

[0082] The initiator sends a first negotiation package to the responder based on the cryptographic algorithm suite it supports, where the responder can determine the hybrid cryptographic algorithm suite from the cryptographic algorithm suite list, that is, the cryptographic algorithm suite supported by the initiator includes a hybrid cryptographic algorithm suite, which is a post-quantum algorithm (Post-Quantum Cryptography, PQC) + national secret algorithm SM2 suite.

[0083] It should be noted that if the initiator supports both the hybrid cryptographic algorithm and the national cryptographic algorithm, the cryptographic algorithm suite list sent by the initiator to the responder includes: the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid cryptographic suite and the national cryptographic algorithm SM2 suite.

[0084] If the initiator only supports the national encryption algorithm, the cryptographic algorithm suite list sent by the initiator to the responder includes: the national encryption algorithm SM2 suite.

[0085] S102: Receive a second negotiation packet sent by the responder.

[0086] Among them, the second negotiation package includes: a hybrid cryptographic algorithm suite, and the responder's second hybrid dual certificate, the second hybrid dual certificate includes: the responder's second hybrid signature certificate and second hybrid encryption certificate generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information.

[0087] Specifically, the responder determines whether there is a hybrid cryptographic algorithm suite supported by the responder based on the received cryptographic algorithm suite list. For example, if the cryptographic algorithm suite list includes: a hybrid cryptographic algorithm suite, namely, a PQC+SM2 hybrid cryptographic suite and a national cryptographic algorithm SM2 suite, and the responder supports both the hybrid cryptographic algorithm and the national cryptographic algorithm, then the hybrid cryptographic algorithm suite, namely, the PQC+SM2 hybrid cryptographic suite, is determined.

[0088] It should be noted that if the responder only supports the national encryption algorithm, the hybrid encryption algorithm suite cannot be determined, and only the national encryption algorithm SM2 suite can be determined.

[0089] The responder sends the second hybrid dual certificate generated by the hybrid cryptographic algorithm suite and the hybrid cryptographic algorithm suite to the initiator, so that the initiator receives the second negotiation packet sent by the responder.

[0090] S103: Generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain a first hybrid dual certificate of the initiator.

[0091] Among them, the first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated by a hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information.

[0092] Specifically, the initiator parses the second negotiation packet to determine the hybrid cryptographic algorithm suite, then generates first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtains the initiator's first hybrid dual certificate.

[0093] S104: Send a third negotiation packet to the responder.

[0094] Among them, the third negotiation package includes: first key information, first hybrid dual certificate and first hybrid signature data. The third negotiation package is used to enable the responder to verify the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and generate the first-stage working key of the responder.

[0095] The initiator sends the generated first key information and first hybrid signature data, as well as the obtained first hybrid dual certificate to the responder, so that the responder verifies the identity of the initiator and obtains the first-stage working key for generating the responder.

[0096] S105: Receive the fourth negotiation packet sent by the responder.

[0097] The fourth negotiation package includes: second key information and second mixed signature data, and the second key information and the second mixed signature data are information generated by the responder after encryption and signing according to the mixed cryptographic algorithm suite.

[0098] S106. Verify the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and generate a first-stage working key for the initiator.

[0099] Specifically, after receiving the second key information and the second mixed signature data sent by the responder, the initiator verifies the identity of the responder and generates a first-stage working key of the initiator.

[0100] It should be noted that in the method provided in this application, the PQC+SM2 hybrid dual certificate system is compatible with the national encryption SM2 dual certificate system. By expanding the hybrid cryptographic algorithm suite and modifying the national encryption IKE protocol process, the integration of post-quantum and national encryption is achieved.

[0101] If both the responder and the initiator support the hybrid cryptographic algorithm suite, the identity authentication and key negotiation between the initiator and the responder are achieved through the method of the present application. Since the hybrid cryptographic algorithm suite includes post-quantum algorithms and national secret algorithms, it has anti-quantum characteristics and prevents the session from being cracked and stolen. However, if one of the responder and the initiator does not support the hybrid cryptographic algorithm suite, the national secret algorithm suite is used to achieve identity authentication and key negotiation between the initiator and the responder, which is conducive to the smooth migration of the entire system from the national secret algorithm to the post-quantum cryptography.

[0102] In summary, an embodiment of the present application provides a method for post-quantum and national secret hybrid dual certificate IKE key negotiation, which is applied to the first phase negotiation of the initiator, and the method includes: sending a first negotiation package to the responder, the first negotiation package includes: a list of cryptographic algorithm suites supported by the initiator, the first negotiation package is used to enable the responder to determine the hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, the hybrid cryptographic algorithm suite is a post-quantum and national secret hybrid algorithm suite, receiving a second negotiation package sent by the responder, the second negotiation package includes: a hybrid cryptographic algorithm suite, and the responder's second hybrid dual certificate, the second hybrid dual certificate includes: the responder's second hybrid signature certificate and second hybrid encryption certificate generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate indicates a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the second hybrid encryption certificate indicates an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information, according to the hybrid cryptographic algorithm suite, generating first key information and first hybrid signature data, and obtaining the initiator's first hybrid dual certificate, the first hybrid dual certificate includes: using The initiator generates the first hybrid signature certificate and the first hybrid encryption certificate using the hybrid cryptographic algorithm suite, wherein the first hybrid signature certificate is indicated as a signature certificate including the post-quantum signature algorithm public key information and the national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including the post-quantum encryption algorithm public key information and the national secret encryption algorithm public key information. A third negotiation package is sent to the responder, wherein the third negotiation package includes: the first key information, the first hybrid dual certificate and the first hybrid signature data. The third negotiation package is used to enable the responder to use the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate to verify the identity of the initiator and generate the first-stage working key of the responder. The responder receives the fourth negotiation package sent by the responder, wherein the fourth negotiation package includes: the second key information and the second hybrid signature data. The second key information and the second hybrid signature data are respectively information generated by the responder after encryption and signing according to the hybrid cryptographic algorithm suite. According to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, the responder's identity is verified and the first-stage working key of the initiator is generated.

[0103] The method of the present application determines a hybrid cryptographic algorithm suite supported by both parties by sending a first negotiation package to the responder and receiving a second negotiation package sent by the responder, then determines the initiator's first key information, first hybrid dual certificate and first hybrid signature data based on the hybrid cryptographic algorithm suite, and sends them to the responder, the responder further verifies the identity of the initiator, and generates the responder's first-stage working key, and at the same time, the responder determines the responder's second key information and second hybrid signature data based on the hybrid cryptographic algorithm suite, the initiator further verifies the identity of the responder, and generates the initiator's first-stage working key, thereby realizing identity authentication and key negotiation between the initiator and the responder, wherein the hybrid cryptographic algorithm suite includes a post-quantum algorithm and a national secret algorithm, has anti-quantum characteristics, and prevents the session key from being cracked and stolen.

[0104] The embodiment of the present application also provides another possible implementation method of the post-quantum and national secret hybrid dual-certificate IKE key negotiation method. Figure 2 The second flowchart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application. Figure 2 As shown, according to the hybrid cryptographic algorithm suite, first key information and first hybrid signature data are generated, and a first hybrid dual certificate of the initiator is obtained, including:

[0105] S201. Parse the second negotiation packet to obtain a hybrid cryptographic algorithm suite.

[0106] In this embodiment, the cryptographic algorithm suite supported by the responder, ie, the hybrid cryptographic algorithm suite, is determined by parsing the second negotiation packet.

[0107] S202. Use the hybrid encryption public key of the responder corresponding to the hybrid cryptographic algorithm suite as the first encryption public key.

[0108] Among them, the responder's hybrid encryption public key includes: post-quantum encryption algorithm public key information and national secret encryption algorithm public key information.

[0109] Specifically, the hybrid encryption public key of the second hybrid encryption certificate generated by the responder using the hybrid cryptographic algorithm suite, ie, the PQC+SM2 hybrid cryptographic suite, is used as the first encryption public key.

[0110] S203. Encrypt the first random number of the initiator and the identity information of the initiator respectively according to the first temporary symmetric key to obtain a first encrypted ciphertext.

[0111] The first encrypted ciphertext includes: the first random number ciphertext of the initiator and the identity identification information ciphertext of the initiator.

[0112] S204. Perform hybrid encryption on the first temporary symmetric key according to the first encrypted public key to obtain a first temporary symmetric key ciphertext.

[0113] The first key information includes: a first encrypted ciphertext and a first temporary symmetric key ciphertext.

[0114] Specifically, the initiator's first random number and the initiator's identity information are first encrypted by using a first temporary symmetric key to obtain a first encrypted ciphertext. Since the first encryption public key is the responder's hybrid encryption public key, the hybrid encryption public key includes: a post-quantum encryption algorithm public key and a national secret encryption algorithm public key. The first temporary symmetric key is hybrid-encrypted according to the post-quantum encryption algorithm public key and the national secret encryption algorithm public key to obtain a first temporary symmetric key ciphertext, thereby obtaining the first key information.

[0115] S205: Use a hybrid cryptographic algorithm suite to obtain a first hybrid dual certificate of the initiator.

[0116] The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate, and the first hybrid signature certificate and the first hybrid encryption certificate are certificates generated by adopting a hybrid cryptographic algorithm suite respectively.

[0117] S206. Use the hybrid signature private key of the initiator corresponding to the hybrid cryptographic algorithm suite to perform hybrid signature protection on the initiator's first random number, the initiator's identity information, the first temporary symmetric key and the first hybrid encryption certificate to obtain first hybrid signature data.

[0118] Specifically, the initiator uses the hybrid signature private key corresponding to the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid signature private key, to perform hybrid double signature protection on the initiator's first random number, the initiator's identity information, the first temporary symmetric key and the first hybrid encryption certificate to obtain the first hybrid signature data.

[0119] It should be noted that if one of the initiator and the responder does not support the hybrid cryptographic algorithm suite, the national cryptographic algorithm suite will be used to generate the first national cryptographic key information and the first national cryptographic signature data, and obtain the initiator's first national cryptographic dual certificate.

[0120] Specifically, the national encryption public key of the second national encryption certificate generated by the responder using the national encryption algorithm suite, namely the national encryption algorithm SM2 suite, is used as the first national encryption public key, and then the first random number of the initiator and the identity information of the initiator are encrypted according to the third temporary symmetric key to obtain the third encrypted ciphertext; according to the first national encryption public key, the third temporary symmetric key is hybrid-encrypted to obtain the third temporary symmetric key ciphertext, and the first national secret key information includes: the third encrypted ciphertext and the third temporary symmetric key ciphertext, and the national encryption algorithm suite is used to obtain the first national secret double certificate of the initiator, and then the national secret signature private key of the initiator corresponding to the national encryption algorithm suite, namely the SM2 signature private key, is used to sign and protect the first random number of the initiator, the identity information of the initiator, the third temporary symmetric key and the first national secret encryption certificate in the first national secret double certificate to obtain the first national secret signature data.

[0121] In the method provided in the embodiment of the present application, a hybrid cryptographic algorithm suite is obtained by parsing the second negotiation package, and the hybrid encryption public key of the responder corresponding to the hybrid cryptographic algorithm suite is used as the first encryption public key. The hybrid encryption public key of the responder includes: post-quantum encryption algorithm public key information and national secret encryption algorithm public key information. According to the first temporary symmetric key, the first random number of the initiator and the identity information of the initiator are encrypted respectively to obtain a first encrypted ciphertext. The first encrypted ciphertext includes: the first random number ciphertext of the initiator and the identity information ciphertext of the initiator. According to the first encryption public key, the first temporary symmetric key is hybrid-encrypted to obtain a first temporary symmetric key ciphertext. The first key information includes: the first encrypted ciphertext and the first temporary symmetric key ciphertext. The hybrid cryptographic algorithm suite is used to obtain the first hybrid dual certificate of the initiator. The hybrid signature private key of the initiator corresponding to the hybrid cryptographic algorithm suite is used to perform hybrid signature protection on the first random number of the initiator, the identity information of the initiator, the first temporary symmetric key information and the first hybrid encryption certificate to obtain the first hybrid signature data. Thus, according to the hybrid cryptographic algorithm suite, the first key information and the first hybrid signature data are generated, and the first hybrid dual certificate of the initiator is obtained.

[0122] The embodiment of the present application also provides another possible implementation method of the post-quantum and national secret hybrid dual-certificate IKE key negotiation method.

[0123] In this embodiment, the hybrid cryptographic algorithm suite is a PQC+SM2 hybrid algorithm suite, wherein the first hybrid signature certificate and the second hybrid signature certificate use the PQC signature algorithm and the SM2 signature algorithm to implement dual digital signatures, and the PQC signature algorithm may include: the lattice-based post-quantum cryptography algorithm Dilithium, the fast Fourier transform-based post-quantum digital signature algorithm (Fast-Fourier Lattice-Based Compact Signature over NTRU, FALCON) and the hash-based digital signature algorithm (Stateless Hash-based Digital Signature, SPHINCS+). The hybrid signature key consists of two key components, PQC and SM2. When signing, the two private key components of PQC and SM2 are used respectively to perform a dual signature operation on the signed data, and the signature result consists of two signature values ​​of PQC and SM2. When verifying the signature, the two public key components of PQC and SM2 are used respectively to verify the two signature values. If both signature values ​​are successfully verified, the verification is considered successful.

[0124] The first hybrid encryption certificate and the second hybrid encryption certificate use the PQC encryption algorithm and the SM2 encryption algorithm to implement hybrid key encapsulation, wherein the PQC key encapsulation algorithm can select the kyber algorithm based on the lattice post-quantum cryptography algorithm. The hybrid encryption key consists of two key components, PQC and SM2. When encrypting, the two public key components of PQC and SM2 are used to perform a hybrid key encapsulation operation on the message plaintext, and the encryption result includes the two ciphertext components of PQC and SM2 and the message ciphertext. When decrypting, the two private key components of PQC and SM2 are used to perform a hybrid key decapsulation operation to obtain the message plaintext.

[0125] It should be noted that if one of the initiator and the responder does not support the hybrid cryptographic algorithm suite, the national secret algorithm suite, namely the SM2 algorithm suite, is used. The first national secret signature certificate and the second national secret signature certificate use the SM2 signature algorithm to implement digital signatures. When signing, the SM2 private key is used to perform signature operations on the signature data, and the signature result consists of the SM2 signature value. When verifying the signature, the SM2 public key is used to verify the signature value. If the signature value is successfully verified, the verification is considered successful.

[0126] The first national secret encryption certificate and the second national secret encryption certificate use the SM2 encryption algorithm to implement key encapsulation. When encrypting, the SM2 public key is used to perform key encapsulation operations on the message plaintext. The encryption result includes SM2 ciphertext and message ciphertext. When decrypting, the SM2 private key is used to perform key decryption operations to obtain the message plaintext.

[0127] The embodiment of the present application also provides another possible implementation method of the post-quantum and national secret hybrid dual-certificate IKE key negotiation method. Figure 3 The third flow chart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application. Figure 3 As shown, according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, the identity of the responder is verified, and the first-stage working key of the initiator is generated, including:

[0128] S301. Use the hybrid encryption private key of the initiator corresponding to the hybrid cryptographic algorithm suite as the first decryption private key.

[0129] S302. Decrypt the second temporary symmetric key ciphertext in the second key information according to the first decryption private key to obtain a second temporary symmetric key.

[0130] S303: Decrypt the second encrypted ciphertext in the second key information according to the second temporary symmetric key to obtain the second random number of the responder and the identity information of the responder.

[0131] In this embodiment, since the second key information includes: a second encrypted ciphertext and a second temporary symmetric key ciphertext, the second encrypted ciphertext is an encrypted ciphertext obtained by the responder encrypting the second random number and the responder's identity information according to the second temporary symmetric key using the initiator's hybrid encryption public key as the second encryption public key, and then according to the second temporary symmetric key; the second temporary symmetric key ciphertext is a temporary symmetric key ciphertext obtained by hybridly encrypting the second temporary symmetric key according to the second encryption public key.

[0132] Therefore, the initiator uses the initiator's hybrid encryption private key corresponding to the hybrid cryptographic algorithm suite as the first decryption private key, decrypts the second temporary symmetric key ciphertext in the second key information, and obtains the second temporary symmetric key. Then, based on the second temporary symmetric key, the second encrypted ciphertext in the second key information is decrypted to obtain the responder's second random number and the responder's identity information, wherein the initiator's hybrid encryption private key is specifically the hybrid private key corresponding to the first hybrid encryption certificate, and the initiator's hybrid encryption public key is specifically the hybrid public key corresponding to the first hybrid encryption certificate.

[0133] Specifically, the hybrid encryption private key of the first hybrid encryption certificate generated by the initiator using the hybrid cryptographic algorithm suite, ie, the PQC+SM2 hybrid cryptographic suite, is used as the first decryption private key.

[0134] S304: Use the hybrid signature public key of the responder corresponding to the hybrid cryptographic algorithm suite to authenticate the second hybrid signature data and obtain the responder's identity authentication result.

[0135] S305: If the identity authentication result of the responder is successful, generate the first-stage working key of the initiator according to the second random number of the responder and the first random number of the initiator.

[0136] Specifically, the second mixed signature data is the second mixed signature data obtained by the responder performing mixed signature protection on the second key information according to the responder's mixed signature private key.

[0137] Therefore, the hybrid signature public key of the responder corresponding to the hybrid cryptographic algorithm suite, that is, the PQC+SM2 hybrid signature public key, is used to authenticate the second hybrid signature data to obtain the identity authentication result of the responder. If the identity authentication result of the responder is successful, the first-stage working key of the initiator is generated according to the second random number of the responder and the first random number of the initiator. Among them, the hybrid signature public key of the responder is specifically the hybrid public key corresponding to the second hybrid signature certificate, and the hybrid signature private key of the responder is specifically the hybrid private key corresponding to the second hybrid signature certificate.

[0138] It should be noted that if one of the initiator and the responder does not support the hybrid cryptographic algorithm suite, the national secret algorithm suite, namely the SM2 algorithm suite, is adopted, and the national secret encryption private key of the initiator corresponding to the national secret algorithm suite is adopted as the first national secret decryption private key. According to the first national secret decryption private key, the fourth temporary symmetric key ciphertext in the second national secret key information is decrypted to obtain the fourth temporary symmetric key. According to the fourth temporary symmetric key, the second national secret encrypted ciphertext in the second national secret key information is decrypted to obtain the second random number of the responder and the identity information of the responder. The national secret signature public key of the responder corresponding to the national secret algorithm suite is used to authenticate the second national secret signature data to obtain the identity authentication result of the responder. If the identity authentication result of the responder is successful, the first-stage working key of the initiator is generated according to the second random number of the responder and the first random number of the initiator.

[0139] In the method provided in the embodiment of the present application, the hybrid encryption private key of the initiator corresponding to the hybrid cryptographic algorithm suite is used as the first decryption private key, and the second temporary symmetric key ciphertext in the second key information is decrypted according to the first decryption private key to obtain the second temporary symmetric key; the second encrypted ciphertext in the second key information is decrypted according to the second temporary symmetric key to obtain the second random number of the responder and the identity information of the responder, and the hybrid signature public key of the responder corresponding to the hybrid cryptographic algorithm suite is used to authenticate the second hybrid signature data to obtain the identity authentication result of the responder; if the identity authentication result of the responder is successful, the first-stage working key of the initiator is generated according to the second random number of the responder and the first random number of the initiator, thereby realizing key negotiation between the initiator and the responder.

[0140] The embodiment of the present application also provides another possible implementation of the method for post-quantum and national secret hybrid dual-certificate IKE key negotiation. Since the key negotiation is negotiated between the initiator and the responder, the method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided by the embodiment of the present application is also applied to the first phase negotiation of the responder. Figure 4 The fourth flowchart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application. Figure 4 As shown, the method includes:

[0141] S401: Receive a first negotiation packet sent by an initiator.

[0142] In this embodiment, the first negotiation packet includes: a list of cryptographic algorithm suites supported by the initiator.

[0143] Specifically, the initiator sends a first negotiation packet to the responder according to the cryptographic algorithm suite supported by the initiator.

[0144] If the initiator supports both the hybrid cryptographic algorithm and the national cryptographic algorithm, the cryptographic algorithm suite list sent by the initiator to the responder includes: the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid cryptographic suite and the national cryptographic algorithm SM2 suite.

[0145] If the initiator only supports the national encryption algorithm, the cryptographic algorithm suite list sent by the initiator to the responder includes: the national encryption algorithm SM2 suite.

[0146] Then, after the initiator determines the cryptographic algorithm suite it supports, it sends a first negotiation packet to the responder, so that the responder receives the first negotiation packet.

[0147] S402: Determine the hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list.

[0148] Among them, the hybrid cryptographic algorithm suite is a post-quantum and national secret hybrid algorithm suite.

[0149] The responder determines whether there is a hybrid cryptographic algorithm suite supported by the responder based on the received cryptographic algorithm suite list. For example, if the cryptographic algorithm suite list includes: a hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid cryptographic suite and the national cryptographic algorithm SM2 suite, and the responder supports both the hybrid cryptographic algorithm and the national cryptographic algorithm, then the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid cryptographic suite, is determined; if the responder only supports the national cryptographic algorithm, then the hybrid cryptographic algorithm suite cannot be determined, and only the national cryptographic algorithm suite can be determined.

[0150] S403: Send a second negotiation packet to the initiator.

[0151] Among them, the second negotiation package includes: a hybrid cryptographic algorithm suite and the responder's second hybrid dual certificate, the second hybrid dual certificate includes: the responder's second hybrid signature certificate and second hybrid encryption certificate generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information, the second negotiation package is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the initiator's first hybrid dual certificate; the first hybrid dual certificate includes: the initiator's first hybrid signature certificate and first hybrid encryption certificate generated by the hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information.

[0152] Specifically, a hybrid cryptographic algorithm suite is used to generate the responder's second hybrid signature certificate and second hybrid encryption certificate, and the second negotiation package sent to the initiator includes: the hybrid cryptographic algorithm suite and the responder's second hybrid signature certificate and second hybrid encryption certificate.

[0153] The initiator parses the second negotiation package, determines the hybrid cryptographic algorithm suite, generates first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtains the initiator's first hybrid dual certificate.

[0154] It should be noted that if one of the initiator or the responder does not support the hybrid key algorithm suite, the responder's second national secret signature certificate and second national secret encryption certificate generated by the national secret algorithm suite are used. The second negotiation package sent to the initiator includes: the national secret algorithm suite and the responder's second national secret signature certificate and second national secret encryption certificate.

[0155] S404: Receive a third negotiation packet sent by the initiator.

[0156] The third negotiation package includes: first key information, a first hybrid dual certificate and a first hybrid signature data.

[0157] S405: Verify the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate.

[0158] S406: Generate second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite.

[0159] S407: Send a fourth negotiation packet to the initiator, and generate a first-stage working key for the responder.

[0160] Among them, the fourth negotiation package includes: second key information and second hybrid signature data. The fourth negotiation package is used to enable the initiator to verify the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and generate the initiator's first-stage working key.

[0161] Specifically, the responder verifies the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and then generates the second key information and the second hybrid signature data based on the hybrid cryptographic algorithm suite, and sends the generated second key information and the second hybrid signature data to the initiator, and generates the first-stage working key of the responder, so that the initiator can verify the identity of the responder and generate the first-stage working key of the initiator, wherein the first-stage working key of the responder and the first-stage working key of the initiator are the same working key.

[0162] In summary, an embodiment of the present application provides a method for post-quantum and national secret hybrid dual certificate IKE key negotiation, which is applied to the first phase negotiation of the responder, and the method includes: receiving a first negotiation package sent by the initiator, the first negotiation package including: a list of cryptographic algorithm suites supported by the initiator; determining the hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, the hybrid cryptographic algorithm suite being a post-quantum and national secret hybrid algorithm suite; sending a second negotiation package to the initiator, the second negotiation package including: a hybrid cryptographic algorithm suite and a second hybrid dual certificate of the responder, the second hybrid dual certificate including: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using the hybrid cryptographic algorithm suite, the second hybrid signature certificate indicating a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the second hybrid encryption certificate indicating an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information, the second negotiation package is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the first hybrid dual certificate of the initiator; the first hybrid dual The certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated by a hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including a post-quantum signature algorithm public key information and a national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including a post-quantum encryption algorithm public key information and a national secret encryption algorithm public key information; receiving a third negotiation package sent by the initiator, the third negotiation package includes: first key information, a first hybrid dual certificate and a first hybrid signature data; verifying the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate; generating second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite; sending a fourth negotiation package to the initiator, and generating a first-stage working key of the responder, the fourth negotiation package includes: second key information and second hybrid signature data, and the fourth negotiation package is used to enable the initiator to verify the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and generate the first-stage working key of the initiator.

[0163] The method of the present application determines the hybrid cryptographic algorithm suite supported by both parties by receiving the first negotiation package of the initiator and the second negotiation package sent to the responder, and then verifies the identity of the initiator and generates the first-stage working key of the responder based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate. At the same time, based on the hybrid cryptographic algorithm suite, the second key information and the second hybrid signature data of the responder are sent to the initiator, so that the initiator further verifies the identity of the responder and generates the first-stage working key of the initiator, thereby realizing identity authentication and key negotiation between the initiator and the responder. The hybrid cryptographic algorithm suite includes a post-quantum algorithm and a national secret algorithm, has anti-quantum characteristics, and prevents the session key from being cracked and stolen.

[0164] The present application embodiment also provides another possible implementation method of the post-quantum and national secret hybrid dual-certificate IKE key negotiation method. Figure 5 The fifth flow chart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in the embodiment of the present application. Figure 5 As shown, according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, the identity of the initiator is verified, including:

[0165] S501. Use the hybrid encryption private key of the responder corresponding to the hybrid cryptographic algorithm suite as the second decryption private key.

[0166] S502: Decrypt the first temporary symmetric key ciphertext in the first key information according to the second decryption private key to obtain a first temporary symmetric key.

[0167] S503: Decrypt the first encrypted ciphertext in the first key information according to the first temporary symmetric key to obtain the first random number of the initiator and the identity information of the initiator.

[0168] In this embodiment, since the first key information includes: a first encrypted ciphertext and a first temporary symmetric key ciphertext, the first encrypted ciphertext is an encrypted ciphertext obtained by encrypting the initiator's first random number and the initiator's identity information according to the first temporary symmetric key using the responder's hybrid encryption public key as the first encryption public key, and then encrypting the first random number and the initiator's identity information according to the first temporary symmetric key. The first temporary symmetric key ciphertext is a temporary symmetric key ciphertext obtained by hybrid encrypting the first temporary symmetric key according to the first encryption public key.

[0169] Therefore, the responder uses the responder's hybrid encryption private key corresponding to the hybrid cryptographic algorithm suite as the second decryption private key, decrypts the first temporary symmetric key ciphertext in the first key information, and obtains the first temporary symmetric key. Then, based on the first temporary symmetric key, the first encrypted ciphertext in the first key information is decrypted to obtain the initiator's first random number and the initiator's identity information, wherein the responder's hybrid encryption private key is specifically the hybrid private key corresponding to the second hybrid encryption certificate, and the responder's hybrid encryption public key is specifically the hybrid public key corresponding to the second hybrid encryption certificate.

[0170] Optionally, the hybrid encryption private key of the second hybrid encryption certificate generated by the responder using the hybrid cryptographic algorithm suite, ie, the PQC+SM2 hybrid cryptographic suite, is used as the second decryption private key.

[0171] S504: Use the hybrid signature public key of the initiator corresponding to the hybrid cryptographic algorithm suite to authenticate the first hybrid signature data and obtain the initiator's identity authentication result.

[0172] Based on the above, the working key of the first phase of the responder is generated, including: S505, if the identity authentication result of the initiator is successful, the working key of the first phase of the responder is generated according to the first random number of the initiator and the second random number of the responder.

[0173] Specifically, the first hybrid signature data is obtained by the initiator performing hybrid signature protection on the first key information and the first hybrid dual certificate according to the hybrid signature private key of the initiator.

[0174] Therefore, the hybrid signature public key of the initiator corresponding to the hybrid cryptographic algorithm suite, i.e., the PQC+SM2 hybrid signature public key, is used to perform signature verification on the first hybrid signature data to obtain the identity authentication result of the initiator. If the identity authentication result of the initiator is a successful verification, the first-stage working key of the responder is generated according to the first random number of the initiator and the second random number of the responder, wherein the hybrid signature public key of the initiator is specifically the hybrid public key corresponding to the first hybrid signature certificate, and the hybrid signature private key of the initiator is specifically the hybrid private key corresponding to the first hybrid signature certificate.

[0175] It should be noted that if one of the initiator and the responder does not support the hybrid cryptographic algorithm suite, the national secret algorithm suite, namely the SM2 algorithm suite, is adopted, and the national secret encryption private key of the responder corresponding to the national secret algorithm suite is adopted as the second national secret decryption private key. According to the second national secret decryption private key, the third temporary symmetric key ciphertext in the first national secret key information is decrypted to obtain the third temporary symmetric key. According to the third temporary symmetric key, the first national secret encryption ciphertext in the first national secret key information is decrypted to obtain the initiator's first random number and the initiator's identity information. The national secret signature public key of the initiator corresponding to the national secret algorithm suite is used to authenticate the first national secret signature data to obtain the initiator's identity authentication result; if the initiator's identity authentication result is successful, the first-stage working key of the responder is generated according to the initiator's first random number and the responder's second random number.

[0176] In the method provided in the embodiment of the present application, the hybrid encryption private key of the responder corresponding to the hybrid cryptographic algorithm suite is used as the second decryption private key, and the first temporary symmetric key ciphertext in the first key information is decrypted according to the second decryption private key to obtain the first temporary symmetric key; the first encrypted ciphertext in the first key information is decrypted according to the first temporary symmetric key to obtain the first random number of the initiator and the identity information of the initiator, and the hybrid signature public key of the initiator corresponding to the hybrid cryptographic algorithm suite is used to authenticate the first hybrid signature data to obtain the initiator's identity authentication result; if the initiator's identity authentication result is successful, the first-stage working key of the responder is generated according to the initiator's first random number and the responder's second random number, thereby realizing key negotiation between the initiator and the responder.

[0177] The present application embodiment also provides another possible implementation method of the post-quantum and national secret hybrid dual-certificate IKE key negotiation method. Figure 6 The sixth flow chart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application. Figure 6 As shown, according to the hybrid cryptographic algorithm suite, the second key information and the second hybrid signature data are generated, including:

[0178] S601. Use the hybrid encryption public key of the initiator corresponding to the hybrid cryptographic algorithm suite as the second encryption public key.

[0179] Among them, the initiator's hybrid encryption public key includes: post-quantum encryption algorithm public key information and national secret encryption algorithm public key information.

[0180] In this embodiment, the hybrid encryption public key of the first hybrid encryption certificate generated by the initiator using the hybrid cryptographic algorithm suite, ie, the PQC+SM2 hybrid cryptographic suite, is used as the second encryption public key.

[0181] S602: Encrypt the second random number of the responder and the identity information of the responder respectively according to the second temporary symmetric key to obtain a second encrypted ciphertext.

[0182] The second encrypted ciphertext includes: the second random number ciphertext of the responder and the identity information ciphertext of the responder.

[0183] S603. Perform hybrid encryption on the second temporary symmetric key according to the second encrypted public key to obtain a second temporary symmetric key ciphertext.

[0184] The second key information includes: a second encrypted ciphertext and a second temporary symmetric key ciphertext.

[0185] Specifically, the second random number of the responder and the identity information of the responder are first encrypted by the second temporary symmetric key to obtain a second encrypted ciphertext. Since the second encryption public key is the hybrid encryption public key of the initiator, the hybrid encryption public key includes: a post-quantum encryption algorithm public key and a national secret encryption algorithm public key. Then, the second temporary symmetric key is hybrid-encrypted according to the post-quantum encryption algorithm public key and the national secret encryption algorithm public key to obtain a second temporary symmetric key ciphertext, thereby obtaining the second key information.

[0186] S604: Use the hybrid signature private key of the responder corresponding to the hybrid cryptographic algorithm suite to perform hybrid signature protection on the responder's second random number, the responder's identity information, the second temporary symmetric key and the second hybrid encryption certificate to obtain second hybrid signature data.

[0187] Specifically, the responder uses the hybrid signature private key corresponding to the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid signature private key, to perform hybrid double signature protection on the responder's second random number, the responder's identity information, the second temporary symmetric key and the second hybrid encryption certificate to obtain the second hybrid signature data.

[0188] It should be noted that if one of the initiator and the responder does not support the hybrid cryptographic algorithm suite, the national cryptographic algorithm suite will be used to generate the second national cryptographic key information and the second national cryptographic signature data.

[0189] Specifically, the national encryption public key of the first national encryption certificate generated by the initiator using the national encryption algorithm suite, namely the national encryption algorithm SM2 suite, is used as the second national encryption public key, and then the second random number of the responder and the identity information of the responder are encrypted according to the fourth temporary symmetric key to obtain a fourth encrypted ciphertext; the fourth temporary symmetric key is hybrid-encrypted according to the second national encryption public key to obtain a fourth temporary symmetric key ciphertext, and the second national secret key information includes: the fourth encrypted ciphertext and the fourth temporary symmetric key ciphertext, and then the national encryption signature private key of the responder corresponding to the national encryption algorithm suite, namely the SM2 signature private key, is used to sign and protect the second random number of the responder, the identity information of the responder, the fourth temporary symmetric key and the second national encryption certificate to obtain the second national secret signature data.

[0190] In the method provided in this embodiment, the hybrid encryption public key of the initiator corresponding to the hybrid cryptographic algorithm suite is used as the second encryption public key, and the hybrid encryption public key of the initiator includes: post-quantum encryption algorithm public key information and national secret encryption algorithm public key information. According to the second encryption public key, the second random number of the responder and the identity information of the responder are encrypted respectively to obtain the second encrypted ciphertext, and the second encrypted ciphertext includes: the second random number ciphertext of the responder and the identity information ciphertext of the responder; according to the second encryption public key, the second temporary symmetric key is hybrid encrypted to obtain the second temporary symmetric key ciphertext, and the second key information includes: the second encrypted ciphertext and the second temporary symmetric key ciphertext, and the hybrid signature private key of the responder corresponding to the hybrid cryptographic algorithm suite is used to perform hybrid signature protection on the second random number of the responder, the identity information of the responder, the second temporary symmetric key and the second hybrid encryption certificate to obtain the second hybrid signature data. Thus, according to the hybrid cryptographic algorithm suite, the second key information and the second hybrid signature data are generated.

[0191] The embodiment of the present application also explains the process of the method for post-quantum and national secret hybrid dual-certificate IKE key negotiation through a complete example. Figure 7 A flowchart of a method for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application is shown in FIG7. Figure 7 As shown, the method includes:

[0192] S701: An initiator sends a first negotiation package to a responder, where the first negotiation package includes: a list of cryptographic algorithm suites supported by the initiator.

[0193] S702: The responder receives the first negotiation packet sent by the initiator, and determines the hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list.

[0194] S703: The responder sends a second negotiation package to the initiator, where the second negotiation package includes: a hybrid cryptographic algorithm suite and a second hybrid dual certificate of the responder.

[0195] Among them, the second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated by a hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information.

[0196] S704: The initiator generates first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtains the initiator's first hybrid dual certificate.

[0197] Among them, the first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated by a hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information.

[0198] S705: The initiator sends a third negotiation package to the responder, where the third negotiation package includes: first key information, a first hybrid dual certificate, and a first hybrid signature data.

[0199] S706: The responder receives the third negotiation package and verifies the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate.

[0200] S707: The responder generates second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite, and sends a fourth negotiation packet to the initiator.

[0201] The fourth negotiation package includes: second key information and second mixed signature data.

[0202] S708: The responder generates a working key for the first phase of the responder.

[0203] After the responder verifies the identity of the initiator, if the identity authentication result of the initiator is successful, it generates second key information and second mixed signature data according to the hybrid cryptographic algorithm suite, and sends a fourth negotiation package to the initiator, and then generates the first-stage working key of the responder according to the initiator's first random number and the responder's second random number.

[0204] S709. The initiator receives the fourth negotiation package sent by the responder, and verifies the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and generates the first-stage working key of the initiator.

[0205] In this embodiment, the specific contents of steps S701-S709 are all recorded in detail in the above steps S101-S604, and are not repeated here.

[0206] The following is a corresponding explanation of the device for executing the post-quantum and national secret hybrid dual-certificate IKE key negotiation provided by any of the above embodiments of the present application. Its specific implementation process and the technical effects produced are the same as those of the corresponding method embodiments mentioned above. For the sake of brief description, the parts not mentioned in this embodiment can refer to the corresponding content in the method embodiment.

[0207] Figure 8 A functional module diagram of a device for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application. Figure 8 As shown, the post-quantum and national secret hybrid dual-certificate IKE key negotiation device 100 is applied to the first phase negotiation of the initiator, including:

[0208] The first sending module 110 is used to send a first negotiation package to the responder, the first negotiation package including: a list of cryptographic algorithm suites supported by the initiator, the first negotiation package is used to enable the responder to determine a hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, the hybrid cryptographic algorithm suite being a post-quantum and national secret hybrid algorithm suite;

[0209] The first receiving module 120 is used to receive a second negotiation package sent by the responder, the second negotiation package including: a hybrid cryptographic algorithm suite, and a second hybrid dual certificate of the responder, the second hybrid dual certificate including: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information;

[0210] The first generating module 130 is used to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the first hybrid dual certificate of the initiator, the first hybrid dual certificate including: the first hybrid signature certificate and the first hybrid encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including the post-quantum signature algorithm public key information and the national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including the post-quantum encryption algorithm public key information and the national secret encryption algorithm public key information;

[0211] The first sending module 110 is further used to send a third negotiation package to the responder, the third negotiation package including: first key information, first hybrid dual certificate and first hybrid signature data, the third negotiation package is used to enable the responder to verify the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and generate a first-stage working key of the responder;

[0212] The first receiving module 120 is further used to receive a fourth negotiation packet sent by the responder, the fourth negotiation packet including: second key information and second hybrid signature data, the second key information and the second hybrid signature data are respectively information generated by the responder after encryption and signing according to the hybrid cryptographic algorithm suite;

[0213] The first verification module 140 is used to verify the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and to generate a first-stage working key of the initiator.

[0214] Optionally, the first generation module 130 is also used to parse the second negotiation package to obtain a hybrid cryptographic algorithm suite; use the hybrid encryption public key of the responder corresponding to the hybrid cryptographic algorithm suite as the first encryption public key, and the hybrid encryption public key of the responder includes: post-quantum encryption algorithm public key information and national secret encryption algorithm public key information; according to the first temporary symmetric key, the first random number of the initiator and the identity information of the initiator are respectively encrypted to obtain a first encrypted ciphertext, and the first encrypted ciphertext includes: the first random number ciphertext of the initiator and the identity information ciphertext of the initiator; according to the first encryption public key, the first temporary symmetric key is hybridly encrypted to obtain a first temporary symmetric key ciphertext, and the first key information includes: the first encrypted ciphertext and the first temporary symmetric key ciphertext; use the hybrid cryptographic algorithm suite to obtain the first hybrid dual certificate of the initiator; use the hybrid signature private key of the initiator corresponding to the hybrid cryptographic algorithm suite to perform hybrid signature protection on the initiator's first random number, the initiator's identity information, the first temporary symmetric key and the first hybrid encryption certificate to obtain the first hybrid signature data.

[0215] Optionally, the first verification module 140 is also used to use the hybrid encryption private key of the initiator corresponding to the hybrid cryptographic algorithm suite as the first decryption private key; according to the first decryption private key, the second temporary symmetric key ciphertext in the second key information is decrypted to obtain the second temporary symmetric key; according to the second temporary symmetric key, the second encrypted ciphertext in the second key information is decrypted to obtain the second random number of the responder and the identity information of the responder; using the hybrid signature public key of the responder corresponding to the hybrid cryptographic algorithm suite, the second hybrid signature data is authenticated to obtain the identity authentication result of the responder; if the identity authentication result of the responder is a successful verification, the first-stage working key of the initiator is generated according to the second random number of the responder and the first random number of the initiator.

[0216] Fig. 9 A functional module diagram of another device for post-quantum and national secret hybrid dual-certificate IKE key negotiation provided in an embodiment of the present application. Fig. 9 As shown, the post-quantum and national secret hybrid dual-certificate IKE key negotiation device 200 is applied to the first phase negotiation of the responder, including:

[0217] The second receiving module 210 is used to receive a first negotiation packet sent by the initiator, where the first negotiation packet includes: a list of cryptographic algorithm suites supported by the initiator;

[0218] A determination module 220, configured to determine a hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list;

[0219] The second sending module 230 is used to send a second negotiation package to the initiator, the second negotiation package includes: a hybrid cryptographic algorithm suite and a second hybrid dual certificate of the responder, the second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information, the second negotiation package is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the initiator's first hybrid dual certificate; the first hybrid dual certificate includes: the initiator's first hybrid signature certificate and first hybrid encryption certificate generated by the hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information;

[0220] The second receiving module 210 is further used to receive a third negotiation package sent by the initiator, the third negotiation package including: first key information, a first hybrid dual certificate and a first hybrid signature data;

[0221] The second verification module 240 is used to verify the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate;

[0222] The second generating module 250 is used to generate second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite;

[0223] The second sending module 230 is also used to send a fourth negotiation package to the initiator and generate a first-stage working key for the responder. The fourth negotiation package includes: second key information and second mixed signature data. The fourth negotiation package is used to enable the initiator to verify the identity of the responder according to the mixed cryptographic algorithm suite, the second key information, the second mixed signature data and the second mixed dual certificate, and generate the first-stage working key for the initiator.

[0224] Optionally, the second verification module 240 is further used to use the hybrid encryption private key of the responder corresponding to the hybrid cryptographic algorithm suite as the second decryption private key; decrypt the first temporary symmetric key ciphertext in the first key information according to the second decryption private key to obtain the first temporary symmetric key; decrypt the first encrypted ciphertext in the first key information according to the first temporary symmetric key to obtain the first random number of the initiator and the identity information of the initiator; use the hybrid signature public key of the initiator corresponding to the hybrid cryptographic algorithm suite to authenticate the first hybrid signature data to obtain the identity authentication result of the initiator;

[0225] The second generating module 250 is further configured to generate a first-stage working key of the responder according to the first random number of the initiator and the second random number of the responder if the identity authentication result of the initiator is successful.

[0226] Optionally, the second generation module 250 is also used to adopt the hybrid encryption public key of the initiator corresponding to the hybrid cryptographic algorithm suite as the second encryption public key, the hybrid encryption public key of the initiator includes: post-quantum encryption algorithm public key information and national secret encryption algorithm public key information; according to the second temporary symmetric key, the second random number of the responder and the identity information of the responder are respectively encrypted to obtain a second encrypted ciphertext, the second encrypted ciphertext includes: the second random number ciphertext of the responder and the identity information ciphertext of the responder; according to the second encryption public key, the second temporary symmetric key is hybrid-encrypted to obtain a second temporary symmetric key ciphertext, the second key information includes: the second encrypted ciphertext and the second temporary symmetric key ciphertext; the hybrid signature private key of the responder corresponding to the hybrid cryptographic algorithm suite is used to perform hybrid signature protection on the responder's second random number, the responder's identity information, the second temporary symmetric key and the second hybrid encryption certificate to obtain second hybrid signature data.

[0227] The above-mentioned device is used to execute the method provided by the aforementioned embodiment, and its implementation principle and technical effect are similar, which will not be repeated here.

[0228] The above modules may be one or more integrated circuits configured to implement the above methods, such as one or more application specific integrated circuits (ASICs), or one or more microprocessors, or one or more field programmable gate arrays (FPGAs). For another example, when a module is implemented in the form of a processing element scheduling program code, the processing element may be a general-purpose processor, such as a central processing unit (CPU) or other processor that can call program code. For another example, these modules may be integrated together and implemented in the form of a system-on-a-chip (SOC).

[0229] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art who is familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A post-quantum and national secret hybrid dual-certificate IKE key negotiation method, It is characterized in that Applied to the first phase negotiation of the initiator, the method comprises: Sending a first negotiation package to the responder, the first negotiation package including: a list of cryptographic algorithm suites supported by the initiator, the first negotiation package being used to enable the responder to determine a hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, the hybrid cryptographic algorithm suite being a post-quantum and national secret hybrid algorithm suite; Receive a second negotiation package sent by the responder, the second negotiation package comprising: the hybrid cryptographic algorithm suite, and the second hybrid dual certificate of the responder, the second hybrid dual certificate comprising: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information; Generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain a first hybrid dual certificate of the initiator, the first hybrid dual certificate comprising: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite, the first hybrid signature certificate indicating a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the first hybrid encryption certificate indicating an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information; Sending a third negotiation package to the responder, the third negotiation package including: the first key information, the first hybrid dual certificate and the first hybrid signature data, the third negotiation package being used to enable the responder to verify the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and to generate a first-stage working key for the responder; Receive a fourth negotiation packet sent by the responder, the fourth negotiation packet comprising: second key information and second hybrid signature data, the second key information and the second hybrid signature data are respectively information generated by the responder after encryption and signing according to the hybrid cryptographic algorithm suite; According to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, the identity of the responder is verified, and the first-stage working key of the initiator is generated.

2. The method according to claim 1, It is characterized in that The step of generating first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtaining a first hybrid dual certificate of the initiator includes: Parsing the second negotiation packet to obtain the hybrid cryptographic algorithm suite; The hybrid encryption public key of the responder corresponding to the hybrid cryptographic algorithm suite is used as the first encryption public key, wherein the hybrid encryption public key of the responder includes: post-quantum encryption algorithm public key information and national secret encryption algorithm public key information; According to the first temporary symmetric key, the first random number of the initiator and the identity information of the initiator are respectively encrypted to obtain a first encrypted ciphertext, wherein the first encrypted ciphertext includes: the first random number ciphertext of the initiator and the identity information ciphertext of the initiator; Perform hybrid encryption on the first temporary symmetric key according to the first encryption public key to obtain a first temporary symmetric key ciphertext, wherein the first key information includes: the first encrypted ciphertext and the first temporary symmetric key ciphertext; Using the hybrid cryptographic algorithm suite, obtaining a first hybrid dual certificate of the initiator; The hybrid signature private key of the initiator corresponding to the hybrid cryptographic algorithm suite is used to perform hybrid signature protection on the initiator's first random number, the initiator's identity information, the first temporary symmetric key and the first hybrid encryption certificate to obtain the first hybrid signature data.

3. The method according to claim 1, It is characterized in that The verifying the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and obtaining the first-stage working key of the initiator, includes: Using the hybrid encryption private key of the initiator corresponding to the hybrid cryptographic algorithm suite as the first decryption private key; Decrypting the second temporary symmetric key ciphertext in the second key information according to the first decryption private key to obtain a second temporary symmetric key; Decrypting the second encrypted ciphertext in the second key information according to the second temporary symmetric key to obtain the second random number of the responder and the identity information of the responder; Using the hybrid signature public key of the responder corresponding to the hybrid cryptographic algorithm suite to authenticate the second hybrid signature data, and obtain an identity authentication result of the responder; If the identity authentication result of the responder is successful, a first-stage working key of the initiator is generated according to the second random number of the responder and the first random number of the initiator.

4. A post-quantum and national secret hybrid dual-certificate IKE key negotiation method, It is characterized in that Applied to the first phase negotiation of the responder, the method comprises: Receiving a first negotiation packet sent by an initiator, wherein the first negotiation packet includes: a list of cryptographic algorithm suites supported by the initiator; Determine a hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, where the hybrid cryptographic algorithm suite is a post-quantum and national secret hybrid algorithm suite; A second negotiation package is sent to the initiator, the second negotiation package comprising: the hybrid cryptographic algorithm suite and the second hybrid dual certificate of the responder, the second hybrid dual certificate comprising: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information, the second negotiation package is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the initiator's first hybrid dual certificate; the first hybrid dual certificate comprises: the initiator's first hybrid signature certificate and first hybrid encryption certificate generated by the hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information; receiving a third negotiation package sent by the initiator, wherein the third negotiation package includes: the first key information, the first hybrid dual certificate, and the first hybrid signature data; Verifying the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate; Generate second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite; A fourth negotiation package is sent to the initiator, and a first-stage working key of the responder is generated, wherein the fourth negotiation package includes: the second key information and the second hybrid signature data, and the fourth negotiation package is used to enable the initiator to verify the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and to generate the first-stage working key of the initiator.

5. The method according to claim 4, It is characterized in that The verifying the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate includes: Using the hybrid encryption private key of the responder corresponding to the hybrid cryptographic algorithm suite as the second decryption private key; Decrypting the first temporary symmetric key ciphertext in the first key information according to the second decryption private key to obtain a first temporary symmetric key; Decrypting the first encrypted ciphertext in the first key information according to the first temporary symmetric key to obtain the first random number of the initiator and the identity information of the initiator; Using the hybrid signature public key of the initiator corresponding to the hybrid cryptographic algorithm suite to authenticate the first hybrid signature data, and obtain an identity authentication result of the initiator; The generating of the working key of the responder in the first phase includes: If the identity authentication result of the initiator is successful, a first-stage working key of the responder is generated according to the first random number of the initiator and the second random number of the responder.

6. The method according to claim 5, It is characterized in that The step of generating second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite includes: The hybrid encryption public key of the initiator corresponding to the hybrid cryptographic algorithm suite is used as the second encryption public key, wherein the hybrid encryption public key of the initiator includes: post-quantum encryption algorithm public key information and national secret encryption algorithm public key information; According to the second temporary symmetric key, the second random number of the responder and the identity information of the responder are respectively encrypted to obtain a second encrypted ciphertext, wherein the second encrypted ciphertext includes: the second random number ciphertext of the responder and the identity information ciphertext of the responder; According to the second encryption public key, the second temporary symmetric key is hybrid-encrypted to obtain a second temporary symmetric key ciphertext, wherein the second key information includes: the second encrypted ciphertext and the second temporary symmetric key ciphertext; The hybrid signature private key of the responder corresponding to the hybrid cryptographic algorithm suite is used to perform hybrid signature protection on the responder's second random number, the responder's identity information, the second temporary symmetric key and the second hybrid encryption certificate to obtain the second hybrid signature data.

7. A device for post-quantum and national secret hybrid dual-certificate IKE key negotiation, It is characterized in that Applied to the first phase negotiation of the initiator, the device comprises: A first sending module is used to send a first negotiation package to the responder, wherein the first negotiation package includes: a list of cryptographic algorithm suites supported by the initiator, and the first negotiation package is used to enable the responder to determine a hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, wherein the hybrid cryptographic algorithm suite is a post-quantum and national secret hybrid algorithm suite; A first receiving module is configured to receive a second negotiation package sent by the responder, wherein the second negotiation package includes: the hybrid cryptographic algorithm suite, and a second hybrid dual certificate of the responder, wherein the second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated by the hybrid cryptographic algorithm suite, wherein the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information; A first generating module is used to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain a first hybrid dual certificate of the initiator, wherein the first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite, wherein the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information; The first sending module is further used to send a third negotiation package to the responder, wherein the third negotiation package includes: the first key information, the first hybrid dual certificate and the first hybrid signature data, and the third negotiation package is used to enable the responder to verify the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and generate a first-stage working key of the responder; The first receiving module is further used to receive a fourth negotiation package sent by the responder, wherein the fourth negotiation package includes: second key information and second hybrid signature data, wherein the second key information and the second hybrid signature data are respectively information generated by the responder after encryption and signing according to the hybrid cryptographic algorithm suite; The first verification module is used to verify the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and to generate a first-stage working key of the initiator.

8. A device for post-quantum and national secret hybrid dual-certificate IKE key negotiation, It is characterized in that Applied to the first phase negotiation of the responder, the device comprises: A second receiving module is configured to receive a first negotiation packet sent by an initiator, wherein the first negotiation packet includes: a list of cryptographic algorithm suites supported by the initiator; A determination module, configured to determine a hybrid cryptographic algorithm suite supported by the responder from the cryptographic algorithm suite list, wherein the hybrid cryptographic algorithm suite is a post-quantum and national secret hybrid algorithm suite; A second sending module is used to send a second negotiation package to the initiator, the second negotiation package includes: the hybrid cryptographic algorithm suite and the second hybrid dual certificate of the responder, the second hybrid dual certificate includes: the second hybrid signature certificate and the second hybrid encryption certificate of the responder generated by the hybrid cryptographic algorithm suite, the second hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, the second hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information, the second negotiation package is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the initiator's first hybrid dual certificate; the first hybrid dual certificate includes: the first hybrid signature certificate and the first hybrid encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite, the first hybrid signature certificate is indicated as a signature certificate including post-quantum signature algorithm public key information and national secret signature algorithm public key information, and the first hybrid encryption certificate is indicated as an encryption certificate including post-quantum encryption algorithm public key information and national secret encryption algorithm public key information; The second receiving module is configured to receive a third negotiation package sent by the initiator, wherein the third negotiation package includes: the first key information, the first hybrid dual certificate, and the first hybrid signature data; a second verification module, configured to verify the identity of the initiator according to the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate; A second generating module, used to generate second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite; The second sending module is also used to send a fourth negotiation package to the initiator and generate a first-stage working key for the responder. The fourth negotiation package includes: the second key information and the second hybrid signature data. The fourth negotiation package is used to enable the initiator to verify the identity of the responder according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and generate the first-stage working key for the initiator.

Images