Method and device for IKE key negotiation using a hybrid dual certificate based on post-quantum and national encryption

Abstract

This application provides a method and apparatus for IKE key negotiation using a hybrid dual-certificate system combining post-quantum and national cryptographic algorithms, relating to the field of cryptographic application technology. Applied to the first-stage negotiation of the initiator, the method includes: determining that both parties support a hybrid cryptographic algorithm suite by sending a first negotiation packet to the responder and receiving a second negotiation packet from the responder; then determining the initiator's first key information, first hybrid dual-certificate, and first hybrid signature data based on the hybrid cryptographic algorithm suite, and sending these to the responder; the responder further verifies the initiator's identity and generates the responder's first-stage working key; simultaneously, the initiator receives the second key information and second hybrid signature data determined by the responder based on the hybrid cryptographic algorithm suite; the initiator further verifies the responder's identity and generates the initiator's first-stage working key, thus achieving identity verification and key negotiation between the initiator and the responder. The hybrid cryptographic algorithm suite includes post-quantum algorithms and national cryptographic algorithms.

Description

Technical Field

[0001] This invention relates to the field of cryptographic application technology, and more specifically, to a method and apparatus for IKE key negotiation using a hybrid dual-certificate system combining post-quantum and Chinese cryptographic standards. Background Technology

[0002] With the rapid development of quantum computing, some of its special properties, such as superposition and entanglement, enable quantum computing to accomplish tasks that classical computing cannot in certain situations, such as fast factorization and quantum parallelism. Therefore, asymmetric algorithms based on mathematical problems such as large number factorization or elliptic curves are vulnerable to being cracked, which leads to the risk of leakage of key materials protected by asymmetric protection in Internet Key Exchange (IKE) key negotiation, and further leads to the decryption and theft of the session key to be transmitted. Summary of the Invention

[0003] The purpose of this invention is to address the shortcomings of the prior art by providing a method and apparatus for IKE key negotiation using a hybrid dual-certificate system of quantum and Chinese cryptographic algorithms, so as to achieve authentication and key negotiation between the initiator and the responder based on a hybrid cryptographic algorithm suite.

[0004] To achieve the above objectives, the technical solutions adopted in the embodiments of this application are as follows:

[0005] In a first aspect, embodiments of this application provide a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and national cryptographic standards, applied to the first-stage negotiation of the initiator. The method includes:

[0006] Send a first negotiation packet to the responder, the first negotiation packet including: a list of cryptographic algorithm suites supported by the initiator, the first negotiation packet being used to enable the responder to determine from the list of cryptographic algorithm suites a hybrid cryptographic algorithm suite supported by the responder, the hybrid cryptographic algorithm suite being a hybrid suite of post-quantum and national cryptographic algorithms;

[0007] The responder receives a second negotiation packet, which includes the hybrid cryptographic algorithm suite and the responder's second hybrid dual certificate. The second hybrid dual certificate includes a second hybrid signature certificate and a second hybrid encryption certificate generated by the responder using the hybrid cryptographic algorithm suite. The second hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The second hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm.

[0008] According to the hybrid cryptographic algorithm suite, first key information and first signature data are generated, and the first hybrid dual certificate of the initiator is obtained. The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated using the hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of the post-quantum signature algorithm and public key information of the national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of the post-quantum encryption algorithm and public key information of the national cryptographic encryption algorithm.

[0009] A third negotiation packet is sent to the responder, the third negotiation packet including: the first key information, the first hybrid dual certificate and the first hybrid signature data, the third negotiation packet being used to enable the responder to verify the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and to generate the responder's working key for the first stage;

[0010] The responder receives a fourth negotiation packet, which includes: second key information and second mixed signature data, wherein the second key information and the second mixed signature data are information generated by the responder after encryption and signing according to the mixed cryptographic algorithm suite;

[0011] The identity of the responder is verified based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and the working key for the initiator in the first stage is generated.

[0012] In an optional implementation, the step of generating first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtaining the initiator's first hybrid dual certificate, includes:

[0013] The second negotiation packet is parsed to obtain the hybrid cryptographic algorithm suite;

[0014] The hybrid encryption public key of the responder corresponding to the hybrid cryptographic algorithm suite is used as the first encryption public key. The hybrid encryption public key of the responder includes: post-quantum encryption algorithm public key information and national cryptographic algorithm public key information.

[0015] Based on the first temporary symmetric key, the first random number of the initiator and the identity information of the initiator are encrypted respectively to obtain the first encrypted ciphertext, which includes: the ciphertext of the first random number of the initiator and the ciphertext of the identity information of the initiator;

[0016] Based on the first encryption public key, the first temporary symmetric key is mixed and encrypted to obtain the first temporary symmetric key ciphertext. The first key information includes: the first encryption ciphertext and the first temporary symmetric key ciphertext.

[0017] Using the aforementioned hybrid cryptographic algorithm suite, the initiator's first hybrid dual certificate is obtained;

[0018] Using the hybrid signature private key of the initiator corresponding to the hybrid cryptographic algorithm suite, the first random number of the initiator, the identity information of the initiator, the first temporary symmetric key and the first hybrid encryption certificate are protected by hybrid signature to obtain the first hybrid signature data.

[0019] In an optional implementation, the step of verifying the identity of the responder based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and generating the initiator's working key for the first stage, includes:

[0020] The hybrid encryption private key of the initiator corresponding to the hybrid cryptographic algorithm suite is used as the first decryption private key;

[0021] Based on the first decryption private key, the second temporary symmetric key ciphertext in the second key information is decrypted to obtain the second temporary symmetric key.

[0022] Based on the second temporary symmetric key, the second encrypted ciphertext in the second key information is decrypted to obtain the second random number of the responder and the identity information of the responder.

[0023] Using the hybrid signature public key of the responder corresponding to the hybrid cryptographic algorithm suite, the second hybrid signature data is authenticated to obtain the authentication result of the responder;

[0024] If the respondent's authentication result is successful, then the initiator's working key for the first stage is generated based on the respondent's second random number and the initiator's first random number.

[0025] Secondly, embodiments of this application also provide a hybrid dual-certificate IKE key negotiation method combining post-quantum and national cryptographic standards, applied to the first-stage negotiation of the responder, the method comprising:

[0026] Receive a first negotiation packet sent by the initiator, the first negotiation packet including: a list of cryptographic algorithm suites supported by the initiator;

[0027] Determine the hybrid cryptographic algorithm suites supported by the responder from the list of cryptographic algorithm suites;

[0028] A second negotiation packet is sent to the initiator. The second negotiation packet includes: the hybrid cryptographic algorithm suite and the responder's second hybrid dual certificate. The second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using the hybrid cryptographic algorithm suite. The second hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The second hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The second negotiation packet is used to enable the initiator to generate first key information and first hybrid signature data based on the hybrid cryptographic algorithm suite, and to obtain the initiator's first hybrid dual certificate. The first hybrid dual certificate includes: a first signature certificate and a first encryption certificate of the initiator generated using the hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm.

[0029] Receive a third negotiation packet sent by the initiator, the third negotiation packet including: the first key information, the first hybrid dual certificate and the first hybrid signature data;

[0030] The identity of the initiator is verified based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate;

[0031] Based on the hybrid cryptographic algorithm suite, generate second key information and second hybrid signature data;

[0032] A fourth negotiation packet is sent to the initiator, and a working key for the first stage of the responder is generated. The fourth negotiation packet includes the second key information and the second hybrid signature data. The fourth negotiation packet is used to enable the initiator to verify the identity of the responder based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and to generate the working key for the first stage of the initiator.

[0033] In an optional implementation, verifying the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate includes:

[0034] The hybrid encryption private key of the responder corresponding to the hybrid cryptographic algorithm suite is used as the second decryption private key;

[0035] Based on the second decryption private key, the first temporary symmetric key ciphertext in the first key information is decrypted to obtain the first temporary symmetric key.

[0036] Based on the first temporary symmetric key, the first encrypted ciphertext in the first key information is decrypted to obtain the first random number of the initiator and the identity information of the initiator.

[0037] Using the hybrid signature public key of the initiator corresponding to the hybrid cryptographic algorithm suite, the first hybrid signature data is authenticated to obtain the authentication result of the initiator;

[0038] The step of generating the working key for the first stage of the responder includes: if the authentication result of the initiator is successful, then generating the working key for the first stage of the responder based on the first random number of the initiator and the second random number of the responder.

[0039] In an optional implementation, generating the second key information and the second hybrid signature data according to the hybrid cryptographic algorithm suite includes:

[0040] The initiator's hybrid encryption public key corresponding to the hybrid cryptographic algorithm suite is used as the second encryption public key. The initiator's hybrid encryption public key includes: post-quantum encryption algorithm public key information and national cryptographic algorithm public key information.

[0041] Based on the second temporary symmetric key, the second random number of the responder and the identity information of the responder are encrypted respectively to obtain the second encrypted ciphertext, which includes: the ciphertext of the second random number of the responder and the ciphertext of the identity information of the responder;

[0042] Based on the second encryption public key, the second temporary symmetric key is mixed and encrypted to obtain the second temporary symmetric key ciphertext. The second key information includes: the second encryption ciphertext and the second temporary symmetric key ciphertext.

[0043] Using the hybrid signature private key of the responder corresponding to the hybrid cryptographic algorithm suite, the responder's second random number, the responder's identity information, the second temporary symmetric key, and the second hybrid encryption certificate are hybrid signature protected to obtain the second hybrid signature data.

[0044] Thirdly, embodiments of this application also provide a device for hybrid dual-certificate IKE key negotiation using both quantum and national cryptographic standards, applied to the first-stage negotiation of the initiator. The device includes:

[0045] A first sending module is configured to send a first negotiation packet to the responder. The first negotiation packet includes a list of cryptographic algorithm suites supported by the initiator. The first negotiation packet is configured to enable the responder to determine, from the list of cryptographic algorithm suites, a hybrid cryptographic algorithm suite supported by the responder, wherein the hybrid cryptographic algorithm suite is a hybrid suite of post-quantum and Chinese cryptographic algorithms.

[0046] A first receiving module is configured to receive a second negotiation packet sent by the responder. The second negotiation packet includes: the hybrid cryptographic algorithm suite, and the responder's second hybrid dual certificate. The second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using the hybrid cryptographic algorithm suite. The second hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The second hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm.

[0047] The first generation module is configured to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the first hybrid dual certificate of the initiator. The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated using the hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of the post-quantum signature algorithm and public key information of the national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of the post-quantum encryption algorithm and public key information of the national cryptographic encryption algorithm.

[0048] The first sending module is further configured to send a third negotiation packet to the responder, the third negotiation packet including: the first key information, the first hybrid dual certificate and the first hybrid signature data, the third negotiation packet being configured to enable the responder to verify the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and to generate the responder's working key for the first stage;

[0049] The first receiving module is further configured to receive a fourth negotiation packet sent by the responder, the fourth negotiation packet including: second key information and second mixed signature data, the second key information and the second mixed signature data being information generated by the responder after encryption and signing according to the mixed cryptographic algorithm suite;

[0050] The first verification module is used to verify the identity of the responder based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and to generate the working key for the initiator in the first stage.

[0051] Fourthly, embodiments of this application also provide an apparatus for hybrid dual-certificate IKE key negotiation using both quantum and national cryptographic standards, applied to the first-stage negotiation of the responder. The apparatus includes:

[0052] The second receiving module is used to receive a first negotiation packet sent by the initiator, the first negotiation packet including: a list of cryptographic algorithm suites supported by the initiator;

[0053] A determining module is configured to determine, from the list of cryptographic algorithm suites, a hybrid cryptographic algorithm suite supported by the responder, wherein the hybrid cryptographic algorithm suite is a hybrid suite of post-quantum and Chinese cryptographic algorithms;

[0054] The second sending module is configured to send a second negotiation packet to the initiator. The second negotiation packet includes: the hybrid cryptographic algorithm suite and the responder's second hybrid dual certificate. The second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using the hybrid cryptographic algorithm suite. The second hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The second hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The second negotiation packet is configured to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and to obtain the initiator's first hybrid dual certificate. The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated using the hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm.

[0055] The second receiving module is used to receive the third negotiation packet sent by the initiator, the third negotiation packet including: the first key information, the first hybrid dual certificate and the first hybrid signature data;

[0056] The second verification module is used to verify the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate.

[0057] The second generation module is used to generate second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite;

[0058] The second sending module is further configured to send a fourth negotiation packet to the initiator and generate the working key for the first stage of the responder. The fourth negotiation packet includes the second key information and the second hybrid signature data. The fourth negotiation packet enables the initiator to verify the identity of the responder based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and to generate the working key for the first stage of the initiator.

[0059] The beneficial effects of this application are:

[0060] This application provides a method and apparatus for IKE key negotiation using a hybrid dual-certificate system of post-quantum and national cryptographic algorithms, applied to the first-stage negotiation of the initiator. The method includes: sending a first negotiation packet to the responder, the first negotiation packet including a list of cryptographic algorithm suites supported by the initiator; the first negotiation packet being used to enable the responder to determine from the list of cryptographic algorithm suites a hybrid cryptographic algorithm suite supported by the responder, wherein the hybrid cryptographic algorithm suite is a hybrid post-quantum and national cryptographic algorithm suite; receiving a second negotiation packet sent by the responder, the second negotiation packet including: the hybrid cryptographic algorithm suite, and the responder's second hybrid dual-certificate, the second hybrid dual-certificate including: a second hybrid signature certificate and a second hybrid encryption certificate generated using the hybrid cryptographic algorithm suite; the second hybrid signature certificate indicating a signature certificate including post-quantum signature algorithm public key information and national cryptographic algorithm public key information, the second hybrid encryption certificate indicating an encryption certificate including post-quantum encryption algorithm public key information and national cryptographic algorithm public key information; generating first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite; and obtaining the initiator's first hybrid dual-certificate, the first hybrid dual-certificate including: using... The initiator generates a first hybrid signature certificate and a first hybrid encryption certificate using a hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The initiator sends a third negotiation packet to the respondent. The third negotiation packet includes: first key information, a first hybrid dual certificate, and first hybrid signature data. The third negotiation packet is used to enable the respondent to verify the identity of the initiator using the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate, and to generate the respondent's first-stage working key. The respondent receives a fourth negotiation packet sent by the respondent. The fourth negotiation packet includes: second key information and second hybrid signature data. The second key information and the second hybrid signature data are information generated by the respondent after encryption and signing according to the hybrid cryptographic algorithm suite, respectively. The respondent's identity is verified according to the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and the initiator's first-stage working key is generated.

[0061] The method of this application determines a hybrid cryptographic algorithm suite supported by both parties by sending a first negotiation packet to the responder and receiving a second negotiation packet from the responder. Then, based on the hybrid cryptographic algorithm suite, the initiator's first key information, first hybrid dual certificate, and first hybrid signature data are determined and sent to the responder. The responder further verifies the initiator's identity and generates the responder's first-stage working key. Simultaneously, the method receives the responder's second key information and second hybrid signature data determined by the responder based on the hybrid cryptographic algorithm suite. The initiator further verifies the responder's identity and generates the initiator's first-stage working key. This achieves identity verification and key negotiation between the initiator and the responder. The hybrid cryptographic algorithm suite includes post-quantum algorithms and national cryptographic algorithms, possessing quantum resistance characteristics to prevent the session key from being cracked and stolen. Attached Figure Description

[0062] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for use in the embodiments. It should be understood that the following drawings only illustrate certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other relevant drawings can be obtained based on these drawings without paying any creative work.

[0063] Figure 1 One of the flowcharts for a method of IKE key negotiation with a hybrid dual certificate of post-quantum and national cryptographic standards provided in this application embodiment;

[0064] Figure 2 A second schematic flowchart illustrating a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and Chinese cryptographic methods, provided for an embodiment of this application;

[0065] Figure 3 The third flowchart illustrates a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and Chinese cryptographic methods, as provided in this application embodiment.

[0066] Figure 4 The fourth flowchart illustrates a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and Chinese cryptographic methods, as provided in this application embodiment.

[0067] Figure 5 The fifth flowchart illustrates a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and Chinese cryptographic methods, as provided in this application embodiment.

[0068] Figure 6 A flowchart illustrating a method for IKE key negotiation using a hybrid dual certificate system combining quantum and Chinese cryptography, provided for an embodiment of this application, is shown in Figure 6.

[0069] Figure 7The seventh flowchart illustrates a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and Chinese cryptographic methods, as provided in this application embodiment.

[0070] Figure 8 A schematic diagram of the functional modules of a device for hybrid dual-certificate IKE key negotiation of post-quantum and national cryptographic standards provided in this application embodiment;

[0071] Figure 9 A schematic diagram of the functional modules of another device for hybrid dual-certificate IKE key negotiation of post-quantum and national cryptographic standards provided in this application embodiment. Detailed Implementation

[0072] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are some embodiments of the present invention, but not all embodiments.

[0073] Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely to illustrate selected embodiments of the application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0074] In the description of this application, it should be noted that if the terms "upper", "lower", etc. appear to indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings, or the orientation or positional relationship that the product of this application is usually placed in, it is only for the convenience of describing this application and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this application.

[0075] Furthermore, the terms "first," "second," etc., used in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Additionally, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0076] It should be noted that, where there is no conflict, the features in the embodiments of this application can be combined with each other.

[0077] Currently, two Virtual Private Network (VPN) devices based on Internet Protocol Security (IPsec) use a dual-certificate system based on Chinese national cryptographic standards for key negotiation during the Internet Key Exchange (IKE) phase to achieve identity authentication and key negotiation. However, with the development of quantum algorithms, quantum algorithms can crack asymmetric algorithms based on mathematical problems such as large number factorization or elliptic curves. This leads to the risk of leakage of key materials protected by asymmetry in IKE key negotiation, which in turn can result in the decryption and theft of the session key to be transmitted.

[0078] Therefore, this application provides a method for IKE key negotiation using a hybrid dual certificate system combining post-quantum and national cryptographic algorithms. It introduces a post-quantum algorithm on the basis of the national cryptographic algorithm to obtain a hybrid dual certificate. By using the hybrid dual certificate system in combination with the national cryptographic dual certificate system, identity authentication and key negotiation between the initiator and the responder can be realized. This method can effectively resist attacks by quantum algorithms, avoid leakage of key materials, and prevent the session key from being deciphered and stolen.

[0079] The following detailed explanation, with reference to the accompanying drawings, illustrates the method for IKE key negotiation using a hybrid dual-certificate system combining quantum and national cryptographic standards, as provided in this application. This method is applied to the first-stage negotiation by the initiator. Figure 1 One of the flowcharts for a method of IKE key negotiation using a hybrid dual-certificate system combining quantum and national cryptographic standards is provided in this application embodiment; as shown below. Figure 1 As shown, the method includes:

[0080] S101, Send the first negotiation packet to the responder.

[0081] In this embodiment, the first negotiation packet includes: a list of cryptographic algorithm suites supported by the initiator. The first negotiation packet is used to enable the responder to determine from the list of cryptographic algorithm suites a hybrid cryptographic algorithm suite supported by the responder. The hybrid cryptographic algorithm suite is a hybrid suite of post-quantum and Chinese cryptographic algorithms.

[0082] The initiator sends a first negotiation packet to the responder based on the cryptographic algorithm suites it supports. The responder can determine the hybrid cryptographic algorithm suite from the list of cryptographic algorithm suites. That is, the cryptographic algorithm suite supported by the initiator includes the hybrid cryptographic algorithm suite, which is a suite of Post-Quantum Cryptography (PQC) + Chinese national cryptographic algorithm SM2.

[0083] It should be noted that if the initiator supports both hybrid cryptographic algorithms and national cryptographic algorithms, the list of cryptographic algorithm suites sent by the initiator to the responder will include: hybrid cryptographic algorithm suite, namely PQC+SM2 hybrid cryptographic suite and national cryptographic algorithm SM2 suite.

[0084] If the initiator only supports Chinese cryptographic algorithms, the list of cryptographic algorithm suites sent by the initiator to the responder will include: the Chinese cryptographic algorithm SM2 suite.

[0085] S102, Receive the second negotiation packet sent by the responder.

[0086] The second negotiation package includes a hybrid cryptographic algorithm suite and a second hybrid dual certificate of the respondent. The second hybrid dual certificate includes a second hybrid signature certificate and a second hybrid encryption certificate of the respondent generated using the hybrid cryptographic algorithm suite. The second hybrid signature certificate indicates a signature certificate including public key information of the post-quantum signature algorithm and public key information of the national cryptographic signature algorithm. The second hybrid encryption certificate indicates an encryption certificate including public key information of the post-quantum encryption algorithm and public key information of the national cryptographic encryption algorithm.

[0087] Specifically, the responder determines whether there is a hybrid cryptographic algorithm suite supported by the received list of cryptographic algorithm suites. For example, if the list of cryptographic algorithm suites includes a hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid cryptographic suite and the Chinese national cryptographic algorithm SM2 suite, and the responder supports both the hybrid cryptographic algorithm and the Chinese national cryptographic algorithm, then the hybrid cryptographic algorithm suite is determined to be the PQC+SM2 hybrid cryptographic suite.

[0088] It should be noted that if the responder only supports Chinese cryptographic algorithms, the hybrid cryptographic algorithm suite cannot be determined; only the Chinese cryptographic algorithm SM2 suite can be determined.

[0089] The responder sends the initiator a second hybrid dual certificate generated by the hybrid cryptographic algorithm suite, along with the hybrid cryptographic algorithm suite, so that the initiator receives the second negotiation packet sent by the responder.

[0090] S103. Based on the hybrid cryptographic algorithm suite, generate first key information and first hybrid signature data, and obtain the initiator's first hybrid dual certificate.

[0091] The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate generated by the initiator using a hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of the post-quantum signature algorithm and public key information of the national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of the post-quantum encryption algorithm and public key information of the national cryptographic encryption algorithm.

[0092] Specifically, the initiator parses the second negotiation packet to determine the hybrid cryptographic algorithm suite, then generates the first key information and the first hybrid signature data based on the hybrid cryptographic algorithm suite, and obtains the initiator's first hybrid dual certificate.

[0093] S104. Send a third negotiation packet to the responder.

[0094] The third negotiation package includes: first key information, first hybrid dual certificate, and first hybrid signature data. The third negotiation package is used to enable the responder to verify the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate, and to generate the responder's working key for the first stage.

[0095] The initiator sends the generated first key information, the first hybrid signature data, and the obtained first hybrid dual certificate to the respondent, so that the respondent can verify the identity of the initiator and obtain the working key for generating the first stage of the respondent.

[0096] S105, Receive the fourth negotiation packet sent by the responder.

[0097] The fourth negotiation packet includes: second key information and second mixed signature data, which are information generated by the responder after being encrypted and signed according to the mixed cryptographic algorithm suite.

[0098] S106. Verify the respondent's identity based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and generate the initiator's working key for the first stage.

[0099] Specifically, upon receiving the second key information and second mixed signature data sent by the responder, the initiator verifies the responder's identity and generates the initiator's working key for the first stage.

[0100] It should be noted that the PQC+SM2 hybrid dual certificate system provided in this application is compatible with the national cryptographic SM2 dual certificate system. By extending the hybrid cryptographic algorithm suite, the national cryptographic IKE protocol process is modified to achieve the integration of post-quantum and national cryptographic systems.

[0101] If both the responder and the initiator support the hybrid cryptographic algorithm suite, the method of this application achieves authentication and key negotiation between the initiator and the responder. Since the hybrid cryptographic algorithm suite includes post-quantum algorithms and national cryptographic algorithms, it has quantum resistance properties, preventing the session from being cracked and stolen. However, if either the responder or the initiator does not support the hybrid cryptographic algorithm suite, the national cryptographic algorithm suite is used to achieve authentication and key negotiation between the initiator and the responder, which is conducive to the smooth migration of the entire system from national cryptographic algorithms to post-quantum cryptography.

[0102] In summary, this application provides a method for IKE key negotiation using a hybrid dual-certificate system combining post-quantum and national cryptographic algorithms, applied to the first-stage negotiation of the initiator. The method includes: sending a first negotiation packet to the responder, the first negotiation packet including a list of cryptographic algorithm suites supported by the initiator; the first negotiation packet being used to enable the responder to determine from the list of cryptographic algorithm suites a hybrid cryptographic algorithm suite supported by the responder, wherein the hybrid cryptographic algorithm suite is a hybrid post-quantum and national cryptographic algorithm suite; receiving a second negotiation packet sent by the responder, the second negotiation packet including: the hybrid cryptographic algorithm suite, and the responder's second hybrid dual-certificate; the second hybrid dual-certificate including: a second hybrid signature certificate and a second hybrid encryption certificate generated using the hybrid cryptographic algorithm suite; the second hybrid signature certificate indicating a signature certificate including post-quantum signature algorithm public key information and national cryptographic algorithm public key information; the second hybrid encryption certificate indicating an encryption certificate including post-quantum encryption algorithm public key information and national cryptographic algorithm public key information; generating first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite; and obtaining the initiator's first hybrid dual-certificate, the first hybrid dual-certificate including: [Further details on key information and signature data are needed for accurate translation]. The initiator generates a first hybrid signature certificate and a first hybrid encryption certificate using a hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The initiator sends a third negotiation packet to the respondent. The third negotiation packet includes: first key information, a first hybrid dual certificate, and first hybrid signature data. The third negotiation packet is used to enable the respondent to verify the identity of the initiator using the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate, and to generate the respondent's first-stage working key. The respondent receives a fourth negotiation packet sent by the respondent. The fourth negotiation packet includes: second key information and second hybrid signature data. The second key information and the second hybrid signature data are information generated by the respondent after encryption and signing according to the hybrid cryptographic algorithm suite, respectively. The respondent verifies the identity of the respondent and generates the initiator's first-stage working key based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate.

[0103] The method of this application determines a hybrid cryptographic algorithm suite supported by both parties by sending a first negotiation packet to the responder and receiving a second negotiation packet from the responder. Then, based on the hybrid cryptographic algorithm suite, the initiator's first key information, first hybrid dual certificate, and first hybrid signature data are determined and sent to the responder. The responder further verifies the initiator's identity and generates the responder's first-stage working key. Simultaneously, the method receives the responder's second key information and second hybrid signature data determined by the responder based on the hybrid cryptographic algorithm suite. The initiator further verifies the responder's identity and generates the initiator's first-stage working key. This achieves identity verification and key negotiation between the initiator and the responder. The hybrid cryptographic algorithm suite includes post-quantum algorithms and national cryptographic algorithms, possessing quantum resistance characteristics to prevent the session key from being cracked and stolen.

[0104] This application also provides another possible implementation of a hybrid dual-certificate IKE key negotiation method combining post-quantum and national cryptographic standards. Figure 2 This is a second schematic flowchart illustrating a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and national cryptographic standards, as provided in an embodiment of this application. Figure 2 As shown, based on the hybrid cryptographic algorithm suite, first key information and first hybrid signature data are generated, and the first hybrid dual certificate of the initiator is obtained, including:

[0105] S201. Parse the second negotiation packet to obtain the hybrid cryptographic algorithm suite.

[0106] In this embodiment, the cryptographic algorithm suite supported by the responder, i.e., the hybrid cryptographic algorithm suite, is determined by parsing the second negotiation packet.

[0107] S202. Use the responder's hybrid encryption public key corresponding to the hybrid cryptographic algorithm suite as the first encryption public key.

[0108] The responder's hybrid encryption public key includes: post-quantum encryption algorithm public key information and national cryptographic algorithm public key information.

[0109] Specifically, the hybrid encryption public key of the second hybrid encryption certificate generated by the responder using the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid cryptographic suite, is used as the first encryption public key.

[0110] S203. Based on the first temporary symmetric key, encrypt the first random number of the initiator and the identity information of the initiator respectively to obtain the first encrypted ciphertext.

[0111] The first encrypted ciphertext includes: the initiator's first random number ciphertext and the initiator's identity information ciphertext.

[0112] S204. Based on the first encryption public key, the first temporary symmetric key is mixed and encrypted to obtain the first temporary symmetric key ciphertext.

[0113] The first key information includes: the first encrypted ciphertext and the first temporary symmetric key ciphertext.

[0114] Specifically, the first random number and the identity information of the initiator are first encrypted using the first temporary symmetric key to obtain the first encrypted ciphertext. Since the first encryption public key is the responder's hybrid encryption public key, which includes the post-quantum encryption algorithm public key and the national cryptographic encryption algorithm public key, the first temporary symmetric key is hybrid encrypted using the post-quantum encryption algorithm public key and the national cryptographic encryption algorithm public key to obtain the first temporary symmetric key ciphertext, thereby obtaining the first key information.

[0115] S205. Use a hybrid cryptographic algorithm suite to obtain the initiator's first hybrid dual certificate.

[0116] The first hybrid dual certificate includes a first hybrid signature certificate and a first hybrid encryption certificate, which are certificates generated using a hybrid cryptographic algorithm suite.

[0117] S206. Using the initiator's hybrid signature private key corresponding to the hybrid cryptographic algorithm suite, the initiator's first random number, the initiator's identity information, the first temporary symmetric key, and the first hybrid encryption certificate are hybrid signature protected to obtain the first hybrid signature data.

[0118] Specifically, the initiator uses the hybrid signature private key corresponding to the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid signature private key, to perform hybrid double signature protection on the initiator's first random number, the initiator's identity information, the first temporary symmetric key, and the first hybrid encryption certificate, to obtain the first hybrid signature data.

[0119] It should be noted that if either the initiator or the responder does not support the hybrid cryptographic algorithm suite, the national cryptographic algorithm suite will be used to generate the first national cryptographic key information and the first national cryptographic signature data, and the first national cryptographic dual certificate of the initiator will be obtained.

[0120] Specifically, the public key of the second national cryptographic encryption certificate generated by the responder using the national cryptographic algorithm suite, namely the SM2 national cryptographic algorithm suite, is used as the first national cryptographic encryption public key. Then, based on the third temporary symmetric key, the initiator's first random number and the initiator's identity information are encrypted to obtain the third encrypted ciphertext. Based on the first national cryptographic encryption public key, the third temporary symmetric key is mixed and encrypted to obtain the third temporary symmetric key ciphertext. The first national cryptographic key information includes: the third encrypted ciphertext and the third temporary symmetric key ciphertext. Using the national cryptographic algorithm suite, the initiator's first national cryptographic dual certificate is obtained. Then, using the initiator's national cryptographic signature private key corresponding to the national cryptographic algorithm suite, namely the SM2 signature private key, the initiator's first random number, the initiator's identity information, the third temporary symmetric key, and the first national cryptographic encryption certificate in the first national cryptographic dual certificate are signed and protected to obtain the first national cryptographic signature data.

[0121] In the method provided in this application embodiment, a hybrid cryptographic algorithm suite is obtained by parsing the second negotiation packet. The hybrid encryption public key of the responder corresponding to the hybrid cryptographic algorithm suite is used as the first encryption public key. The responder's hybrid encryption public key includes: post-quantum encryption algorithm public key information and national cryptographic encryption algorithm public key information. According to the first temporary symmetric key, the initiator's first random number and the initiator's identity information are encrypted respectively to obtain the first encrypted ciphertext. The first encrypted ciphertext includes: the initiator's first random number ciphertext and the initiator's identity information ciphertext. According to the first encryption public key, the first temporary symmetric key is hybrid encrypted to obtain the first temporary symmetric key ciphertext. The first key information includes: the first encrypted ciphertext and the first temporary symmetric key ciphertext. The hybrid cryptographic algorithm suite is used to obtain the initiator's first hybrid dual certificate. The hybrid signature private key of the initiator corresponding to the hybrid cryptographic algorithm suite is used to hybrid sign and protect the initiator's first random number, the initiator's identity information, the first temporary symmetric key information, and the first hybrid encryption certificate to obtain the first hybrid signature data. Based on the hybrid cryptographic algorithm suite, the first key information and the first hybrid signature data are generated, and the first hybrid dual certificate of the initiator is obtained.

[0122] This application also provides another possible implementation of a hybrid dual-certificate IKE key negotiation method combining post-quantum and national cryptographic standards.

[0123] In this embodiment, the hybrid cryptographic algorithm suite is the PQC+SM2 hybrid algorithm suite. The first and second hybrid signature certificates utilize both the PQC and SM2 signature algorithms to achieve dual digital signatures. The PQC signature algorithm may include: Dilithium, a lattice-based post-quantum cryptography algorithm; FALCON, a Fast-Fourier Lattice-Based Compact Signature over NTRU; and SPHINCS+, a stateless hash-based digital signature algorithm. The hybrid signature key consists of two key components: PQC and SM2. During signing, the two private key components of PQC and SM2 are used to perform a dual signature operation on the data to be signed. The signature result consists of two signature values: PQC and SM2. During signature verification, the two signature values ​​are verified using the two public key components of PQC and SM2. If both signature values ​​are successfully verified, the verification is considered successful.

[0124] The first and second hybrid encryption certificates use the PQC and SM2 encryption algorithms to implement hybrid key encapsulation. The PQC key encapsulation algorithm can be the Kyber algorithm, a lattice-based post-quantum cryptography algorithm. The hybrid encryption key consists of two key components: PQC and SM2. During encryption, the two public key components of PQC and SM2 are used to perform hybrid key encapsulation on the plaintext message. The encryption result includes two ciphertext components (PQC and SM2) and the ciphertext message. During decryption, the two private key components of PQC and SM2 are used to perform hybrid key decapsulation to obtain the plaintext message.

[0125] It should be noted that if either the initiator or the responder does not support a hybrid cryptographic algorithm suite, then the national cryptographic algorithm suite, namely the SM2 algorithm suite, will be used. The first and second national cryptographic signature certificates use the SM2 signature algorithm to implement digital signatures. During signing, the SM2 private key is used to perform signature operations on the data to be signed, and the signature result consists of an SM2 signature value. During signature verification, the SM2 public key is used to verify the signature value. If the signature value is successfully verified, the verification is considered successful.

[0126] The first and second national cryptographic encryption certificates use the SM2 encryption algorithm for key encapsulation. During encryption, the SM2 public key is used to perform key encapsulation operations on the plaintext message, resulting in both the SM2 ciphertext and the message ciphertext. During decryption, the SM2 private key is used to perform key decryption operations to obtain the plaintext message.

[0127] This application also provides another possible implementation of a hybrid dual-certificate IKE key negotiation method combining post-quantum and national cryptographic standards. Figure 3 This is the third flowchart illustrating a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and national cryptographic standards, as provided in this application. Figure 3 As shown, based on the hybrid cryptographic algorithm suite, second key information, second hybrid signature data, and second hybrid dual certificate, the identity of the respondent is verified, and the working key for the initiator's first phase is generated, including:

[0128] S301. Use the initiator's hybrid encryption private key corresponding to the hybrid cryptographic algorithm suite as the first decryption private key.

[0129] S302. Based on the first decryption private key, decrypt the second temporary symmetric key ciphertext in the second key information to obtain the second temporary symmetric key.

[0130] S303. Based on the second temporary symmetric key, decrypt the second encrypted ciphertext in the second key information to obtain the second random number of the responder and the identity information of the responder.

[0131] In this embodiment, the second key information includes: a second encrypted ciphertext and a second temporary symmetric key ciphertext. The second encrypted ciphertext is obtained by the responder using the initiator's hybrid encryption public key as the second encryption public key, and then encrypting the responder's second random number and the responder's identity information according to the second temporary symmetric key. The second temporary symmetric key ciphertext is obtained by hybrid encryption of the second temporary symmetric key according to the second encryption public key.

[0132] Therefore, the initiator uses the initiator's hybrid encryption private key corresponding to the hybrid cryptographic algorithm suite as the first decryption private key to decrypt the second temporary symmetric key ciphertext in the second key information to obtain the second temporary symmetric key. Then, based on the second temporary symmetric key, the initiator decrypts the second encryption ciphertext in the second key information to obtain the responder's second random number and the responder's identity information. Specifically, the initiator's hybrid encryption private key is the hybrid private key corresponding to the first hybrid encryption certificate, and the initiator's hybrid encryption public key is the hybrid public key corresponding to the first hybrid encryption certificate.

[0133] Specifically, the hybrid encryption private key of the first hybrid encryption certificate generated by the initiator using the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid cryptographic suite, is used as the first decryption private key.

[0134] S304. Using the responder's hybrid signature public key corresponding to the hybrid cryptographic algorithm suite, authenticate the second hybrid signature data to obtain the responder's authentication result.

[0135] S305. If the responder's authentication result is successful, then the initiator's first-stage working key is generated based on the responder's second random number and the initiator's first random number.

[0136] Specifically, the second mixed signature data is obtained by the responder using the responder's mixed signature private key to perform mixed signature protection on the second key information.

[0137] Therefore, the responder's hybrid signature public key (PQC+SM2 hybrid signature public key) corresponding to the hybrid cryptographic algorithm suite is used to authenticate the second hybrid signature data, obtaining the responder's authentication result. If the responder's authentication result is successful, the initiator's first-stage working key is generated based on the responder's second random number and the initiator's first random number. Specifically, the responder's hybrid signature public key is the hybrid public key corresponding to the second hybrid signature certificate, and the responder's hybrid signature private key is the hybrid private key corresponding to the second hybrid signature certificate.

[0138] It should be noted that if either the initiator or the responder does not support the hybrid cryptographic algorithm suite, then the national cryptographic algorithm suite, namely the SM2 algorithm suite, will be used. The initiator's national cryptographic encryption private key corresponding to the national cryptographic algorithm suite will be used as the first national cryptographic decryption private key. Based on the first national cryptographic decryption private key, the fourth temporary symmetric key ciphertext in the second national cryptographic key information will be decrypted to obtain the fourth temporary symmetric key. Based on the fourth temporary symmetric key, the second national cryptographic encryption ciphertext in the second national cryptographic key information will be decrypted to obtain the responder's second random number and the responder's identity information. The second national cryptographic signature data will be authenticated using the responder's national cryptographic signature public key corresponding to the national cryptographic algorithm suite to obtain the responder's authentication result. If the responder's authentication result is successful, then the initiator's first-stage working key will be generated based on the responder's second random number and the initiator's first random number.

[0139] In the method provided in this application embodiment, the initiator's hybrid encryption private key corresponding to the hybrid cryptographic algorithm suite is used as the first decryption private key. Based on the first decryption private key, the second temporary symmetric key ciphertext in the second key information is decrypted to obtain the second temporary symmetric key. Based on the second temporary symmetric key, the second encryption ciphertext in the second key information is decrypted to obtain the responder's second random number and the responder's identity information. The responder's hybrid signature public key corresponding to the hybrid cryptographic algorithm suite is used to authenticate the second hybrid signature data to obtain the responder's authentication result. If the responder's authentication result is successful, the initiator's first-stage working key is generated based on the responder's second random number and the initiator's first random number, thus realizing key negotiation between the initiator and the responder.

[0140] This application also provides another possible implementation of the IKE key negotiation method using a hybrid dual-certificate system combining quantum and Chinese cryptographic standards. Since key negotiation is conducted between the initiator and the responder, the IKE key negotiation method using a hybrid dual-certificate system combining quantum and Chinese cryptographic standards provided in this application is also applied to the first-stage negotiation of the responder. Figure 4 This is the fourth flowchart illustrating a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and national cryptographic standards, as provided in this application. Figure 4 As shown, the method includes:

[0141] S401, Receive the first negotiation packet sent by the initiator.

[0142] In this embodiment, the first negotiation package includes a list of cryptographic algorithm suites supported by the initiator.

[0143] Specifically, the initiator sends the first negotiation packet to the responder based on the cryptographic algorithm suite it supports.

[0144] If the initiator supports both hybrid cryptographic algorithms and national cryptographic algorithms, the list of cryptographic algorithm suites sent by the initiator to the responder will include: a hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid cryptographic suite and the national cryptographic algorithm SM2 suite.

[0145] If the initiator only supports Chinese cryptographic algorithms, the list of cryptographic algorithm suites sent by the initiator to the responder will include: the Chinese cryptographic algorithm SM2 suite.

[0146] Then, after determining the suite of cryptographic algorithms it supports, the initiator sends a first negotiation packet to the responder, which is then received by the responder.

[0147] S402. Determine the mixed cryptographic algorithm suites supported by the responder from the list of cryptographic algorithm suites.

[0148] Among them, the hybrid cryptographic algorithm suite is a hybrid suite of post-quantum and national cryptographic algorithms.

[0149] The respondent determines whether a hybrid cryptographic algorithm suite supported by the respondent is included in the received list of cryptographic algorithm suites. For example, if the list of cryptographic algorithm suites includes a hybrid cryptographic algorithm suite (i.e., the PQC+SM2 hybrid cryptographic suite and the Chinese national cryptographic algorithm SM2 suite), and the respondent supports both hybrid and Chinese national cryptographic algorithms, then the hybrid cryptographic algorithm suite is determined to be the PQC+SM2 hybrid cryptographic suite. If the respondent only supports Chinese national cryptographic algorithms, then the hybrid cryptographic algorithm suite cannot be determined; only the Chinese national cryptographic algorithm suite can be determined.

[0150] S403, Send the second negotiation packet to the initiator.

[0151] The second negotiation package includes: a hybrid cryptographic algorithm suite and the responder's second hybrid dual certificate. The second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate generated by the responder using the hybrid cryptographic algorithm suite. The second hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The second hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The second negotiation package is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and to obtain the initiator's first hybrid dual certificate. The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate generated by the initiator using the hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm.

[0152] Specifically, if a hybrid cryptographic algorithm suite is used to generate the responder's second hybrid signature certificate and second hybrid encryption certificate, then the second negotiation packet sent to the initiator includes: the hybrid cryptographic algorithm suite and the responder's second hybrid signature certificate and second hybrid encryption certificate.

[0153] This enables the initiator to parse the second negotiation packet, determine the hybrid cryptographic algorithm suite, and generate first key information and first hybrid signature data based on the hybrid cryptographic algorithm suite, and obtain the initiator's first hybrid dual certificate.

[0154] It should be noted that if either the initiator or the responder does not support the hybrid key algorithm suite, then the second negotiation packet sent to the initiator using the responder's second national cryptographic signature certificate and second national cryptographic encryption certificate generated using the national cryptographic algorithm suite will include: the national cryptographic algorithm suite and the responder's second national cryptographic signature certificate and second national cryptographic encryption certificate.

[0155] S404, Receive the third negotiation packet sent by the initiator.

[0156] The third negotiation package includes: first key information, first hybrid dual certificate, and first hybrid signature data.

[0157] S405. Verify the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate.

[0158] S406. Generate second key information and second hybrid signature data based on the hybrid cryptographic algorithm suite.

[0159] S407. Send the fourth negotiation packet to the initiator and generate the working key for the first phase for the responder.

[0160] The fourth negotiation package includes: second key information and second hybrid signature data. The fourth negotiation package is used to enable the initiator to verify the identity of the respondent based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and to generate the initiator's working key for the first stage.

[0161] Specifically, the responder verifies the initiator's identity based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate. Then, the responder generates the second key information and the second hybrid signature data based on the hybrid cryptographic algorithm suite and sends the generated second key information and the second hybrid signature data to the initiator. The responder also generates the responder's first-stage working key, which enables the initiator to verify the responder's identity and generate the initiator's first-stage working key. The responder's first-stage working key and the initiator's first-stage working key are the same working key.

[0162] In summary, this application provides a method for IKE key negotiation using a hybrid dual-certificate system of post-quantum and national cryptographic algorithms, applied to the first stage negotiation of the respondent. The method includes: receiving a first negotiation packet sent by the initiator, the first negotiation packet including a list of cryptographic algorithm suites supported by the initiator; determining a hybrid cryptographic algorithm suite supported by the respondent from the list of cryptographic algorithm suites, wherein the hybrid cryptographic algorithm suite is a hybrid post-quantum and national cryptographic algorithm suite; and sending a second negotiation packet to the initiator, the second negotiation packet including the hybrid cryptographic algorithm suite and the respondent's second hybrid dual-certificate, the second hybrid dual-certificate including: a second hybrid signature certificate and a second hybrid encryption certificate generated using the hybrid cryptographic algorithm suite, the second hybrid signature certificate indicating a signature certificate including post-quantum signature algorithm public key information and national cryptographic algorithm public key information, and the second hybrid encryption certificate indicating an encryption certificate including post-quantum encryption algorithm public key information and national cryptographic algorithm public key information. The second negotiation packet is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and to obtain the initiator's first hybrid dual-certificate. The certificates include: a first hybrid signature certificate and a first hybrid encryption certificate generated by the initiator using a hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The system receives a third negotiation packet sent by the initiator, which includes: first key information, a first hybrid dual certificate, and first hybrid signature data. The system verifies the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate. It generates second key information and second hybrid signature data based on the hybrid cryptographic algorithm suite. The system sends a fourth negotiation packet to the initiator and generates a first-stage working key for the responder. The fourth negotiation packet includes: second key information and second hybrid signature data. The fourth negotiation packet enables the initiator to verify the identity of the responder based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and to generate the first-stage working key for the initiator.

[0163] The method of this application determines a hybrid cryptographic algorithm suite supported by both parties by receiving a first negotiation packet from the initiator and sending a second negotiation packet to the responder. Then, based on the hybrid cryptographic algorithm suite, first key information, first hybrid signature data, and first hybrid dual certificate, the initiator's identity is verified, and a first-stage working key for the responder is generated. Simultaneously, based on the hybrid cryptographic algorithm suite, the responder's second key information and second hybrid signature data are sent to the initiator, enabling the initiator to further verify the responder's identity and generate a first-stage working key for the initiator. This achieves identity authentication and key negotiation between the initiator and the responder. The hybrid cryptographic algorithm suite includes post-quantum algorithms and national cryptographic algorithms, possessing quantum resistance characteristics to prevent the session key from being cracked and stolen.

[0164] This application also provides another possible implementation of the post-quantum and national cryptographic hybrid dual-certificate IKE key negotiation method. Figure 5 This is the fifth flowchart illustrating a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and national cryptographic standards, as provided in this application. Figure 5 As shown, the identity of the initiator is verified based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate, including:

[0165] S501. Use the responder's hybrid encryption private key corresponding to the hybrid cryptographic algorithm suite as the second decryption private key.

[0166] S502. Based on the second decryption private key, the first temporary symmetric key ciphertext in the first key information is decrypted to obtain the first temporary symmetric key.

[0167] S503. Based on the first temporary symmetric key, decrypt the first encrypted ciphertext in the first key information to obtain the first random number of the initiator and the identity information of the initiator.

[0168] In this embodiment, the first key information includes: a first encrypted ciphertext and a first temporary symmetric key ciphertext. The first encrypted ciphertext is obtained by the initiator encrypting the initiator's first random number and the initiator's identity information using the responder's hybrid encryption public key as the first encryption public key and the first temporary symmetric key. The first temporary symmetric key ciphertext is obtained by hybrid encryption of the first temporary symmetric key using the first encryption public key.

[0169] Therefore, the responder uses the responder's hybrid encryption private key corresponding to the hybrid cryptographic algorithm suite as the second decryption private key to decrypt the first temporary symmetric key ciphertext in the first key information to obtain the first temporary symmetric key. Then, based on the first temporary symmetric key, the responder decrypts the first encrypted ciphertext in the first key information to obtain the initiator's first random number and the initiator's identity information. Specifically, the responder's hybrid encryption private key is the hybrid private key corresponding to the second hybrid encryption certificate, and the responder's hybrid encryption public key is the hybrid public key corresponding to the second hybrid encryption certificate.

[0170] Optionally, the hybrid encryption private key of the second hybrid encryption certificate generated by the responder using the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid cryptographic suite, can be used as the second decryption private key.

[0171] S504. Using the initiator's hybrid signature public key corresponding to the hybrid cryptographic algorithm suite, authenticate the first hybrid signature data to obtain the initiator's authentication result.

[0172] Based on the above, the working key for the first stage of the response is generated, including: S505, if the authentication result of the initiator is successful, then the working key for the first stage of the response is generated according to the first random number of the initiator and the second random number of the response.

[0173] Specifically, the first hybrid signature data is obtained by the initiator using the initiator's hybrid signature private key to perform hybrid signature protection on the first key information and the first hybrid dual certificate.

[0174] Therefore, the initiator's hybrid signature public key, namely the PQC+SM2 hybrid signature public key, corresponding to the hybrid cryptographic algorithm suite, is used to verify the first hybrid signature data, thereby obtaining the initiator's authentication result. If the initiator's authentication result is successful, the responder's first-stage working key is generated based on the initiator's first random number and the responder's second random number. Specifically, the initiator's hybrid signature public key is the hybrid public key corresponding to the first hybrid signature certificate, and the initiator's hybrid signature private key is the hybrid private key corresponding to the first hybrid signature certificate.

[0175] It should be noted that if either the initiator or the responder does not support the hybrid cryptographic algorithm suite, then the national cryptographic algorithm suite, namely the SM2 algorithm suite, is used. The responder's national cryptographic encryption private key corresponding to the national cryptographic algorithm suite is used as the second national cryptographic decryption private key. Based on the second national cryptographic decryption private key, the third temporary symmetric key ciphertext in the first national cryptographic key information is decrypted to obtain the third temporary symmetric key. Based on the third temporary symmetric key, the first national cryptographic encryption ciphertext in the first national cryptographic key information is decrypted to obtain the initiator's first random number and the initiator's identity information. The first national cryptographic signature data is then authenticated using the initiator's national cryptographic signature public key corresponding to the national cryptographic algorithm suite, yielding the initiator's authentication result. If the initiator's authentication result is successful, then the responder's first-stage working key is generated based on the initiator's first random number and the responder's second random number.

[0176] In the method provided in this application embodiment, the hybrid encryption private key of the responder corresponding to the hybrid cryptographic algorithm suite is used as the second decryption private key. Based on the second decryption private key, the first temporary symmetric key ciphertext in the first key information is decrypted to obtain the first temporary symmetric key. Based on the first temporary symmetric key, the first encryption ciphertext in the first key information is decrypted to obtain the initiator's first random number and the initiator's identity information. The hybrid signature public key of the initiator corresponding to the hybrid cryptographic algorithm suite is used to authenticate the first hybrid signature data to obtain the initiator's authentication result. If the initiator's authentication result is successful, the working key of the responder in the first stage is generated based on the initiator's first random number and the responder's second random number, thus realizing key negotiation between the initiator and the responder.

[0177] This application also provides another possible implementation of the post-quantum and national cryptographic hybrid dual-certificate IKE key negotiation method. Figure 6 This is the sixth flowchart illustrating a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and national cryptographic standards, as provided in this application. Figure 6 As shown, based on the hybrid cryptographic algorithm suite, second key information and second hybrid signature data are generated, including:

[0178] S601. Use the initiator's hybrid encryption public key corresponding to the hybrid cryptographic algorithm suite as the second encryption public key.

[0179] The initiator's hybrid encryption public key includes: the public key information of the post-quantum encryption algorithm and the public key information of the national cryptographic encryption algorithm.

[0180] In this embodiment, the hybrid encryption public key of the first hybrid encryption certificate generated by the initiator using the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid cryptographic suite, is used as the second encryption public key.

[0181] S602. Based on the second temporary symmetric key, encrypt the second random number of the responder and the identity information of the responder respectively to obtain the second encrypted ciphertext.

[0182] The second encrypted ciphertext includes: the responder's second random number ciphertext and the responder's identity information ciphertext.

[0183] S603. Based on the second encryption public key, the second temporary symmetric key is mixed and encrypted to obtain the second temporary symmetric key ciphertext.

[0184] The second key information includes: the second encrypted ciphertext and the second temporary symmetric key ciphertext.

[0185] Specifically, firstly, the second random number of the responder and the responder's identity information are encrypted using the second temporary symmetric key to obtain the second encrypted ciphertext. Since the second encryption public key is the initiator's hybrid encryption public key, which includes the post-quantum encryption algorithm public key and the national cryptographic encryption algorithm public key, the second temporary symmetric key is hybrid-encrypted using the post-quantum encryption algorithm public key and the national cryptographic encryption algorithm public key to obtain the second temporary symmetric key ciphertext, thereby obtaining the second key information.

[0186] S604. Using the responder's hybrid signature private key corresponding to the hybrid cryptographic algorithm suite, the responder's second random number, the responder's identity information, the second temporary symmetric key, and the second hybrid encryption certificate are hybrid signature protected to obtain the second hybrid signature data.

[0187] Specifically, the responder uses the hybrid signature private key corresponding to the hybrid cryptographic algorithm suite, namely the PQC+SM2 hybrid signature private key, to perform hybrid double signature protection on the responder's second random number, the responder's identity information, the second temporary symmetric key, and the second hybrid encryption certificate, to obtain the second hybrid signature data.

[0188] It should be noted that if either the initiator or the responder does not support the hybrid cryptographic algorithm suite, then the national cryptographic algorithm suite will be used to generate the second national cryptographic key information and the second national cryptographic signature data.

[0189] Specifically, the public key of the first national cryptographic encryption certificate generated by the initiator using the national cryptographic algorithm suite, namely the SM2 national cryptographic algorithm suite, is used as the second national cryptographic encryption public key. Then, based on the fourth temporary symmetric key, the second random number of the respondent and the respondent's identity information are encrypted to obtain the fourth encrypted ciphertext. Based on the second national cryptographic encryption public key, the fourth temporary symmetric key is mixed and encrypted to obtain the fourth temporary symmetric key ciphertext. The second national cryptographic key information includes: the fourth encrypted ciphertext and the fourth temporary symmetric key ciphertext. Then, the national cryptographic signature private key of the respondent corresponding to the national cryptographic algorithm suite, namely the SM2 signature private key, is used to sign and protect the respondent's second random number, the respondent's identity information, the fourth temporary symmetric key, and the second national cryptographic encryption certificate to obtain the second national cryptographic signature data.

[0190] In the method provided in this embodiment, the initiator's hybrid encryption public key corresponding to the hybrid cryptographic algorithm suite is used as the second encryption public key. The initiator's hybrid encryption public key includes: post-quantum encryption algorithm public key information and national cryptographic algorithm public key information. Based on the second encryption public key, the responder's second random number and the responder's identity information are encrypted respectively to obtain second encrypted ciphertext, which includes: the responder's second random number ciphertext and the responder's identity information ciphertext. Based on the second encryption public key, the second temporary symmetric key is hybrid encrypted to obtain second temporary symmetric key ciphertext, which includes: the second encryption ciphertext and the second temporary symmetric key ciphertext. Using the responder's hybrid signature private key corresponding to the hybrid cryptographic algorithm suite, the responder's second random number, the responder's identity information, the second temporary symmetric key, and the second hybrid encryption certificate are hybrid signed and protected to obtain second hybrid signature data. Thus, based on the hybrid cryptographic algorithm suite, second key information and second hybrid signature data are generated.

[0191] This application also provides a complete example to explain the process of the IKE key negotiation method using a hybrid dual-certificate approach combining post-quantum and national cryptographic standards. Figure 7 The seventh flowchart illustrates a method for IKE key negotiation using a hybrid dual-certificate system combining quantum and Chinese cryptographic methods, as provided in this application embodiment. Figure 7 As shown, the method includes:

[0192] S701, The initiator sends a first negotiation packet to the responder, the first negotiation packet including: a list of cryptographic algorithm suites supported by the initiator.

[0193] S702, The responder receives the first negotiation packet sent by the initiator and determines the hybrid cryptographic algorithm suite supported by the responder from the list of cryptographic algorithm suites.

[0194] S703. The respondent sends a second negotiation packet to the initiator, the second negotiation packet including: a hybrid cryptographic algorithm suite, and the respondent's second hybrid dual certificate.

[0195] The second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using a hybrid cryptographic algorithm suite. The second hybrid signature certificate indicates a signature certificate including public key information of the post-quantum signature algorithm and public key information of the national cryptographic signature algorithm. The second hybrid encryption certificate indicates an encryption certificate including public key information of the post-quantum encryption algorithm and public key information of the national cryptographic encryption algorithm.

[0196] S704. The initiator generates first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtains the initiator's first hybrid dual certificate.

[0197] The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate generated by the initiator using a hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of the post-quantum signature algorithm and public key information of the national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of the post-quantum encryption algorithm and public key information of the national cryptographic encryption algorithm.

[0198] S705. The initiator sends a third negotiation packet to the responder. The third negotiation packet includes: first key information, first hybrid dual certificate and first hybrid signature data.

[0199] S706. The responder receives the third negotiation packet and verifies the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate.

[0200] S707. The responder generates second key information and second mixed signature data according to the hybrid cryptographic algorithm suite, and sends a fourth negotiation packet to the initiator.

[0201] The fourth negotiation package includes: second key information and second mixed signature data.

[0202] S708, The responder generates the responder's working key for the first phase.

[0203] After the responder verifies the identity of the initiator, if the initiator's identity verification result is successful, the responder generates second key information and second mixed signature data according to the hybrid cryptographic algorithm suite, and sends a fourth negotiation packet to the initiator. Then, the responder generates the working key for the first stage based on the initiator's first random number and the responder's second random number.

[0204] S709. The initiator receives the fourth negotiation packet sent by the responder and verifies the responder's identity based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and generates the initiator's working key for the first stage.

[0205] In this embodiment, the specific contents of steps S701-S709 are all described in detail in steps S101-S604 above, and will not be repeated here.

[0206] The following continues to explain the apparatus for performing the hybrid dual-certificate IKE key negotiation of quantum and national cryptography provided in any of the above embodiments of this application. Its specific implementation process and the resulting technical effects are the same as those in the corresponding method embodiments. For the sake of brevity, the parts not mentioned in this embodiment can be referred to the corresponding content in the method embodiment.

[0207] Figure 8 This is a functional module diagram of a device for hybrid dual-certificate IKE key negotiation using both quantum and national cryptographic standards, provided as an embodiment of this application. Figure 8 As shown, the device 100 for hybrid quantum and national cryptographic dual-certificate IKE key negotiation is used in the first phase of negotiation by the initiator, including:

[0208] The first sending module 110 is used to send a first negotiation packet to the responder. The first negotiation packet includes a list of cryptographic algorithm suites supported by the initiator. The first negotiation packet is used to enable the responder to determine the hybrid cryptographic algorithm suite supported by the responder from the list of cryptographic algorithm suites. The hybrid cryptographic algorithm suite is a hybrid suite of post-quantum and national cryptographic algorithms.

[0209] The first receiving module 120 is used to receive a second negotiation packet sent by the responder. The second negotiation packet includes: a hybrid cryptographic algorithm suite and the responder's second hybrid dual certificate. The second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using the hybrid cryptographic algorithm suite. The second hybrid signature certificate indicates a signature certificate including the public key information of the post-quantum signature algorithm and the public key information of the national cryptographic signature algorithm. The second hybrid encryption certificate indicates an encryption certificate including the public key information of the post-quantum encryption algorithm and the public key information of the national cryptographic encryption algorithm.

[0210] The first generation module 130 is used to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the first hybrid dual certificate of the initiator. The first hybrid dual certificate includes: the first hybrid signature certificate and the first hybrid encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including the public key information of the post-quantum signature algorithm and the public key information of the national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including the public key information of the post-quantum encryption algorithm and the public key information of the national cryptographic encryption algorithm.

[0211] The first sending module 110 is also used to send a third negotiation packet to the responder. The third negotiation packet includes: first key information, first hybrid dual certificate and first hybrid signature data. The third negotiation packet is used to enable the responder to verify the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and to generate the responder's working key for the first stage.

[0212] The first receiving module 120 is also used to receive a fourth negotiation packet sent by the responder. The fourth negotiation packet includes: second key information and second mixed signature data. The second key information and the second mixed signature data are information generated by the responder after encryption and signing according to the mixed cryptographic algorithm suite.

[0213] The first verification module 140 is used to verify the identity of the responder based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and to generate the working key for the initiator in the first stage.

[0214] Optionally, the first generation module 130 is further configured to parse the second negotiation packet to obtain a hybrid cryptographic algorithm suite; use the hybrid encryption public key of the responder corresponding to the hybrid cryptographic algorithm suite as the first encryption public key, the responder's hybrid encryption public key including: post-quantum encryption algorithm public key information and national cryptographic encryption algorithm public key information; encrypt the initiator's first random number and the initiator's identity information respectively according to the first temporary symmetric key to obtain a first encrypted ciphertext, the first encrypted ciphertext including: the initiator's first random number ciphertext and the initiator's identity information ciphertext; perform hybrid encryption on the first temporary symmetric key according to the first encryption public key to obtain a first temporary symmetric key ciphertext, the first key information including: the first encrypted ciphertext and the first temporary symmetric key ciphertext; use the hybrid cryptographic algorithm suite to obtain the initiator's first hybrid dual certificate; use the initiator's hybrid signature private key corresponding to the hybrid cryptographic algorithm suite to perform hybrid signature protection on the initiator's first random number, the initiator's identity information, the first temporary symmetric key and the first hybrid encryption certificate to obtain first hybrid signature data.

[0215] Optionally, the first verification module 140 is further configured to use the hybrid encryption private key of the initiator corresponding to the hybrid cryptographic algorithm suite as the first decryption private key; decrypt the second temporary symmetric key ciphertext in the second key information according to the first decryption private key to obtain the second temporary symmetric key; decrypt the second encryption ciphertext in the second key information according to the second temporary symmetric key to obtain the second random number of the responder and the identity information of the responder; use the hybrid signature public key of the responder corresponding to the hybrid cryptographic algorithm suite to authenticate the second hybrid signature data to obtain the authentication result of the responder; if the authentication result of the responder is successful, then generate the working key of the initiator in the first stage according to the second random number of the responder and the first random number of the initiator.

[0216] Figure 9 A functional module diagram of another device for hybrid dual-certificate IKE key negotiation using post-quantum and national cryptographic standards provided in this application embodiment. Figure 9 As shown, the device 200 for hybrid quantum and national cryptographic dual-certificate IKE key negotiation is applied to the first phase of negotiation for the responder, including:

[0217] The second receiving module 210 is used to receive the first negotiation packet sent by the initiator. The first negotiation packet includes a list of cryptographic algorithm suites supported by the initiator.

[0218] Module 220 is configured to determine, from the list of cryptographic algorithm suites, the mixed cryptographic algorithm suites supported by the responder;

[0219] The second sending module 230 is used to send a second negotiation packet to the initiator. The second negotiation packet includes: a hybrid cryptographic algorithm suite and a second hybrid dual certificate of the responder. The second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using the hybrid cryptographic algorithm suite. The second hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The second hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The second negotiation packet is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and to obtain the first hybrid dual certificate of the initiator. The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated using the hybrid cryptographic algorithm suite. The first hybrid signature certificate indicates a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The first hybrid encryption certificate indicates an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm.

[0220] The second receiving module 210 is also used to receive a third negotiation packet sent by the initiator. The third negotiation packet includes: first key information, first hybrid dual certificate and first hybrid signature data.

[0221] The second verification module 240 is used to verify the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate;

[0222] The second generation module 250 is used to generate second key information and second mixed signature data according to the hybrid cryptographic algorithm suite;

[0223] The second sending module 230 is further configured to send a fourth negotiation packet to the initiator and generate a working key for the first stage of the responder. The fourth negotiation packet includes: second key information and second hybrid signature data. The fourth negotiation packet is used to enable the initiator to verify the identity of the responder based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and to generate a working key for the first stage of the initiator.

[0224] Optionally, the second verification module 240 is further configured to use the hybrid encryption private key of the responder corresponding to the hybrid cryptographic algorithm suite as the second decryption private key; decrypt the first temporary symmetric key ciphertext in the first key information according to the second decryption private key to obtain the first temporary symmetric key; decrypt the first encryption ciphertext in the first key information according to the first temporary symmetric key to obtain the initiator's first random number and the initiator's identity information; and use the hybrid signature public key of the initiator corresponding to the hybrid cryptographic algorithm suite to authenticate the first hybrid signature data to obtain the initiator's authentication result.

[0225] The second generation module 250 is also used to generate the working key for the first stage of the response party based on the first random number of the initiator and the second random number of the response party if the authentication result of the initiator is successful.

[0226] Optionally, the second generation module 250 is further configured to use the initiator's hybrid encryption public key corresponding to the hybrid cryptographic algorithm suite as the second encryption public key, wherein the initiator's hybrid encryption public key includes: post-quantum encryption algorithm public key information and national cryptographic encryption algorithm public key information; encrypt the responder's second random number and the responder's identity information respectively according to the second temporary symmetric key to obtain second encrypted ciphertext, wherein the second encrypted ciphertext includes: the responder's second random number ciphertext and the responder's identity information ciphertext; perform hybrid encryption on the second temporary symmetric key according to the second encryption public key to obtain second temporary symmetric key ciphertext, wherein the second key information includes: the second encrypted ciphertext and the second temporary symmetric key ciphertext; and use the responder's hybrid signature private key corresponding to the hybrid cryptographic algorithm suite to perform hybrid signature protection on the responder's second random number, the responder's identity information, the second temporary symmetric key, and the second hybrid encryption certificate to obtain second hybrid signature data.

[0227] The above-described device is used to execute the method provided in the foregoing embodiments, and its implementation principle and technical effect are similar, so they will not be described again here.

[0228] These modules can be one or more integrated circuits configured to implement the above methods, such as one or more Application Specific Integrated Circuits (ASICs), one or more microprocessors, or one or more Field Programmable Gate Arrays (FPGAs). Alternatively, when a module is implemented using processing element scheduler code, the processing element can be a general-purpose processor, such as a Central Processing Unit (CPU) or other processor capable of calling program code. Furthermore, these modules can be integrated together as a system-on-a-chip (SOC).

[0229] The above are merely specific embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A method for IKE key negotiation using a hybrid dual-certificate system combining post-quantum and national cryptographic standards, characterized in that... The method, applied to the first phase of negotiation by the initiator, includes: Send a first negotiation packet to the responder, the first negotiation packet including: a list of cryptographic algorithm suites supported by the initiator, the first negotiation packet being used to enable the responder to determine from the list of cryptographic algorithm suites a hybrid cryptographic algorithm suite supported by the responder, the hybrid cryptographic algorithm suite being a hybrid suite of post-quantum and national cryptographic algorithms; The responder receives a second negotiation packet sent by the responder. The second negotiation packet includes: the hybrid cryptographic algorithm suite, and the responder's second hybrid dual certificate. The second hybrid dual certificate includes: the responder's second hybrid signature certificate and second hybrid encryption certificate generated using the hybrid cryptographic algorithm suite. The second hybrid signature certificate is a signature certificate including public key information of the post-quantum signature algorithm and public key information of the national cryptographic signature algorithm. The second hybrid encryption certificate is an encryption certificate including public key information of the post-quantum encryption algorithm and public key information of the national cryptographic encryption algorithm. According to the hybrid cryptographic algorithm suite, first key information and first hybrid signature data are generated, and the first hybrid dual certificate of the initiator is obtained. The first hybrid dual certificate includes: the first hybrid signature certificate and the first hybrid encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite. The first hybrid signature certificate is a signature certificate including the public key information of the post-quantum signature algorithm and the public key information of the national cryptographic signature algorithm. The first hybrid encryption certificate is an encryption certificate including the public key information of the post-quantum encryption algorithm and the public key information of the national cryptographic encryption algorithm. A third negotiation packet is sent to the responder, the third negotiation packet including: the first key information, the first hybrid dual certificate and the first hybrid signature data, the third negotiation packet being used to enable the responder to verify the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and to generate the responder's working key for the first stage; The responder receives a fourth negotiation packet, which includes: second key information and second mixed signature data, wherein the second key information and the second mixed signature data are information generated by the responder after encryption and signing according to the mixed cryptographic algorithm suite; The identity of the responder is verified based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and the working key for the initiator in the first stage is generated.

2. The method according to claim 1, characterized in that, The step of generating first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtaining the initiator's first hybrid dual certificate, includes: The second negotiation packet is parsed to obtain the hybrid cryptographic algorithm suite; The hybrid encryption public key of the responder corresponding to the hybrid cryptographic algorithm suite is used as the first encryption public key. The hybrid encryption public key of the responder includes: post-quantum encryption algorithm public key information and national cryptographic algorithm public key information. Based on the first temporary symmetric key, the first random number of the initiator and the identity information of the initiator are encrypted respectively to obtain the first encrypted ciphertext, which includes: the ciphertext of the first random number of the initiator and the ciphertext of the identity information of the initiator; Based on the first encryption public key, the first temporary symmetric key is hybrid encrypted to obtain the first temporary symmetric key ciphertext. The first key information includes: the first encryption ciphertext and the first temporary symmetric key ciphertext; wherein, the hybrid encryption is to use the public key information of the responder's post-quantum encryption algorithm and the public key information of the national cryptographic encryption algorithm in the first encryption public key to encrypt the first temporary symmetric key respectively. Using the aforementioned hybrid cryptographic algorithm suite, the initiator's first hybrid dual certificate is obtained; Using the hybrid signature private key of the initiator corresponding to the hybrid cryptographic algorithm suite, the initiator's first random number, the initiator's identity information, the first temporary symmetric key, and the first hybrid encryption certificate are hybrid signature protected to obtain the first hybrid signature data. The initiator's hybrid signature private key includes the initiator's post-quantum signature algorithm private key information and the national cryptographic signature algorithm private key information. The hybrid signature protection involves using the initiator's post-quantum signature algorithm private key information and the national cryptographic signature algorithm private key information to perform signature operations on the data to be signed, respectively. The data to be signed includes the initiator's first random number, the initiator's identity information, the first temporary symmetric key, and the first hybrid encryption certificate.

3. The method according to claim 1, characterized in that, The step of verifying the identity of the responder and obtaining the initiator's working key for the first stage based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate includes: The hybrid encryption private key of the initiator corresponding to the hybrid cryptographic algorithm suite is used as the first decryption private key; Based on the first decryption private key, the second temporary symmetric key ciphertext in the second key information is decrypted to obtain the second temporary symmetric key. Based on the second temporary symmetric key, the second encrypted ciphertext in the second key information is decrypted to obtain the second random number of the responder and the identity information of the responder. Using the hybrid signature public key of the responder corresponding to the hybrid cryptographic algorithm suite, the second hybrid signature data is authenticated to obtain the authentication result of the responder; If the respondent's authentication result is successful, then the initiator's working key for the first stage is generated based on the respondent's second random number and the initiator's first random number.

4. A method for IKE key negotiation using a hybrid dual-certificate system combining post-quantum and national cryptographic standards, characterized in that... The method, applied to the first phase of negotiation with the responder, includes: Receive a first negotiation packet sent by the initiator, the first negotiation packet including: a list of cryptographic algorithm suites supported by the initiator; The respondent is selected from the list of cryptographic algorithm suites to support a hybrid cryptographic algorithm suite that is a hybrid suite of post-quantum and Chinese cryptographic algorithms. A second negotiation packet is sent to the initiator. The second negotiation packet includes: the hybrid cryptographic algorithm suite and the responder's second hybrid dual certificate. The second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using the hybrid cryptographic algorithm suite. The second hybrid signature certificate is a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The second hybrid encryption certificate is an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The second negotiation packet is used to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and to obtain the initiator's first hybrid dual certificate. The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated using the hybrid cryptographic algorithm suite. The first hybrid signature certificate is a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The first hybrid encryption certificate is an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. Receive a third negotiation packet sent by the initiator, the third negotiation packet including: the first key information, the first hybrid dual certificate and the first hybrid signature data; The identity of the initiator is verified based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate; Based on the hybrid cryptographic algorithm suite, generate second key information and second hybrid signature data; A fourth negotiation packet is sent to the initiator, and a working key for the first stage of the responder is generated. The fourth negotiation packet includes the second key information and the second hybrid signature data. The fourth negotiation packet is used to enable the initiator to verify the identity of the responder based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data and the second hybrid dual certificate, and to generate the working key for the first stage of the initiator.

5. The method according to claim 4, characterized in that, The step of verifying the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate includes: The hybrid encryption private key of the responder corresponding to the hybrid cryptographic algorithm suite is used as the second decryption private key; Based on the second decryption private key, the first temporary symmetric key ciphertext in the first key information is decrypted to obtain the first temporary symmetric key. Based on the first temporary symmetric key, the first encrypted ciphertext in the first key information is decrypted to obtain the first random number of the initiator and the identity information of the initiator. Using the hybrid signature public key of the initiator corresponding to the hybrid cryptographic algorithm suite, the first hybrid signature data is authenticated to obtain the authentication result of the initiator; The generation of the working key for the first phase of the response includes: If the initiator's authentication result is successful, then the responder's working key for the first stage is generated based on the initiator's first random number and the responder's second random number.

6. The method according to claim 5, characterized in that, The step of generating second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite includes: The initiator's hybrid encryption public key corresponding to the hybrid cryptographic algorithm suite is used as the second encryption public key. The initiator's hybrid encryption public key includes: post-quantum encryption algorithm public key information and national cryptographic algorithm public key information. Based on the second temporary symmetric key, the second random number of the responder and the identity information of the responder are encrypted respectively to obtain the second encrypted ciphertext, which includes: the ciphertext of the second random number of the responder and the ciphertext of the identity information of the responder; Based on the second encryption public key, the second temporary symmetric key is mixed-encrypted to obtain the second temporary symmetric key ciphertext. The second key information includes: the second encryption ciphertext and the second temporary symmetric key ciphertext; wherein, the mixed encryption is performed by using the initiator's post-quantum encryption algorithm public key information and the national cryptographic encryption algorithm public key information in the second encryption public key to encrypt the second temporary symmetric key respectively. Using the hybrid signature private key of the responder corresponding to the hybrid cryptographic algorithm suite, the responder's second random number, the responder's identity information, the second temporary symmetric key, and the second hybrid encryption certificate are hybrid signature protected to obtain the second hybrid signature data. The responder's hybrid signature private key includes the responder's post-quantum signature algorithm private key information and the national cryptographic signature algorithm private key information. The hybrid signature protection involves using the responder's post-quantum signature algorithm private key information and the national cryptographic signature algorithm private key information to perform signature operations on the data to be signed, respectively. The data to be signed includes the responder's second random number, the responder's identity information, the second temporary symmetric key, and the second hybrid encryption certificate.

7. A device for hybrid dual-certificate IKE key negotiation combining post-quantum and national cryptographic standards, characterized in that, The apparatus, used for the first phase of negotiation by the initiator, includes: A first sending module is configured to send a first negotiation packet to the responder. The first negotiation packet includes a list of cryptographic algorithm suites supported by the initiator. The first negotiation packet is configured to enable the responder to determine, from the list of cryptographic algorithm suites, a hybrid cryptographic algorithm suite supported by the responder, wherein the hybrid cryptographic algorithm suite is a hybrid suite of post-quantum and Chinese cryptographic algorithms. A first receiving module is configured to receive a second negotiation packet sent by the responder. The second negotiation packet includes: the hybrid cryptographic algorithm suite, and the responder's second hybrid dual certificate. The second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using the hybrid cryptographic algorithm suite. The second hybrid signature certificate is a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The second hybrid encryption certificate is an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The first generation module is configured to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and obtain the first hybrid dual certificate of the initiator. The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated by the hybrid cryptographic algorithm suite. The first hybrid signature certificate is a signature certificate including public key information of the post-quantum signature algorithm and public key information of the national cryptographic signature algorithm. The first hybrid encryption certificate is an encryption certificate including public key information of the post-quantum encryption algorithm and public key information of the national cryptographic encryption algorithm. The first sending module is further configured to send a third negotiation packet to the responder, the third negotiation packet including: the first key information, the first hybrid dual certificate and the first hybrid signature data, the third negotiation packet being configured to enable the responder to verify the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data and the first hybrid dual certificate, and to generate the responder's working key for the first stage; The first receiving module is further configured to receive a fourth negotiation packet sent by the responder, the fourth negotiation packet including: second key information and second mixed signature data, the second key information and the second mixed signature data being information generated by the responder after encryption and signing according to the mixed cryptographic algorithm suite; The first verification module is used to verify the identity of the responder based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and to generate the working key for the initiator in the first stage.

8. A device for hybrid dual-certificate IKE key negotiation combining post-quantum and national cryptographic standards, characterized in that, The apparatus, used for the first phase of negotiation with the responders, includes: The second receiving module is used to receive a first negotiation packet sent by the initiator, the first negotiation packet including: a list of cryptographic algorithm suites supported by the initiator; A determining module is configured to determine, from the list of cryptographic algorithm suites, a hybrid cryptographic algorithm suite supported by the responder, wherein the hybrid cryptographic algorithm suite is a hybrid suite of post-quantum and Chinese cryptographic algorithms; The second sending module is configured to send a second negotiation packet to the initiator. The second negotiation packet includes: the hybrid cryptographic algorithm suite and the responder's second hybrid dual certificate. The second hybrid dual certificate includes: a second hybrid signature certificate and a second hybrid encryption certificate of the responder generated using the hybrid cryptographic algorithm suite. The second hybrid signature certificate is a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The second hybrid encryption certificate is an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The second negotiation packet is configured to enable the initiator to generate first key information and first hybrid signature data according to the hybrid cryptographic algorithm suite, and to obtain the initiator's first hybrid dual certificate. The first hybrid dual certificate includes: a first hybrid signature certificate and a first hybrid encryption certificate of the initiator generated using the hybrid cryptographic algorithm suite. The first hybrid signature certificate is a signature certificate including public key information of a post-quantum signature algorithm and public key information of a national cryptographic signature algorithm. The first hybrid encryption certificate is an encryption certificate including public key information of a post-quantum encryption algorithm and public key information of a national cryptographic encryption algorithm. The second receiving module is used to receive the third negotiation packet sent by the initiator, the third negotiation packet including: the first key information, the first hybrid dual certificate and the first hybrid signature data; The second verification module is used to verify the identity of the initiator based on the hybrid cryptographic algorithm suite, the first key information, the first hybrid signature data, and the first hybrid dual certificate. The second generation module is used to generate second key information and second hybrid signature data according to the hybrid cryptographic algorithm suite; The second sending module is further configured to send a fourth negotiation packet to the initiator and generate the working key for the first stage of the responder. The fourth negotiation packet includes the second key information and the second hybrid signature data. The fourth negotiation packet enables the initiator to verify the identity of the responder based on the hybrid cryptographic algorithm suite, the second key information, the second hybrid signature data, and the second hybrid dual certificate, and to generate the working key for the first stage of the initiator.

Images