Network communication protocol based on post-quantum key encapsulation method

Abstract

The invention discloses a network communication protocol based on a post-quantum key encapsulation method, which comprises a user side, a server side and a static public and private key pair, and is characterized in that a double-side communication process comprises the following steps: S1, the server side responds to a service request message sent by the user side, and encapsulates a public key generated and sent by the user side; s2, the server side feeds back the output packaging result and the generated first associated head message to the user side; s3, the user side decapsulates the encapsulation result to obtain a shared key, generates a second associated header message and sends the second associated header message to the server side; s4, the two ends generate a static shared key through the static public and private key pair; s5, the server side receives a first key confirmation message and a third associated header message sent by the user side, and feeds back a second key confirmation message and a fourth associated header message of the user side; on the basis of an LAC encryption algorithm, an IND-1-CCA secure post-quantum key encapsulation mechanism is designed and is adaptive to a KEMTLS protocol framework, and compared with the existing design, the method has higher performance no matter in a bottom-layer encapsulation algorithm or an upper-layer protocol.

Description

Technical Field

[0001] The present invention relates to the technical field of cryptography, and in particular to a network communication protocol based on a post-quantum key encapsulation method. Background Art

[0002] In today's digital age, with the rapid development of quantum computers, traditional encryption technology is facing unprecedented challenges. Quantum computers, with their potential huge computing power, threaten the security of existing encryption algorithms, forcing network protocols to migrate to post-quantum security algorithms to ensure the security of data transmission and prevent it from being cracked by future quantum computers.

[0003] In the pursuit of post-quantum security solutions, the LAC algorithm, as a domestic post-quantum algorithm, has attracted widespread attention due to its higher performance and smaller space overhead in public key encryption technology compared to international standardized algorithms. These advantages of the LAC algorithm make it a strong candidate for ensuring communication security in the post-quantum era.

[0004] Recently, the introduction of KEMTLS (Common Security Protocol) has further promoted the advancement of encryption technology. KEMTLS is a new key encapsulation mechanism designed based on the traditional TLS (Transport Layer Security Protocol). Compared with TLS, KEMTLS demonstrates higher performance, especially in terms of efficiency when establishing secure communication connections, which makes it valuable in protecting network communications from future quantum computing attacks.

[0005] Designing an efficient post-quantum key encapsulation mechanism based on the LAC algorithm and further adapting the network protocol on this basis can not only improve the performance of the network protocol, but also has important research significance. This adaptation work can ensure that network communications can remain secure and reliable even after quantum computers become a reality, thus providing a more solid security line of defense for the digital world. Summary of the invention

[0006] The purpose of the present invention is to provide a network communication protocol based on a post-quantum key encapsulation method to solve the problems raised in the above background technology.

[0007] To achieve the above object, the present invention provides the following technical solution: a network communication protocol based on a post-quantum key encapsulation method, comprising a user end, a server end and a static public-private key pair, wherein the two-end communication process comprises the following steps: S1. The server responds to the service request message sent by the user and encapsulates the public key generated and sent by the user; S2, the server side feeds back the output encapsulation result and the generated associated header message to the user side; S3, the user end decapsulates the encapsulation result to obtain the shared key, and generates a second associated header message to send to the server end; S4, both ends generate a static shared key through a static public-private key pair; S5. The server receives the key confirmation message 1 and the associated header message 3 sent by the user, and feeds back the key confirmation message 2 and the associated header message 4 to the user.

[0008] Preferably, in step S1, the user terminal generates a key through a key generation function Generate a public-private key pair, including the following steps: a1. Randomly sample seeds; a2. Generate ring elements using the seed through rejection sampling method; a3. Randomly sample the private key elements and noise; a4. Calculate the public key element through the ring element, private key element and noise; a5. Use the seed, public key element and private key element to assign values ​​and output the public-private key pair.

[0009] Preferably, in step S1, the server uses a key encapsulation function The packaging process includes the following steps: b1. Generate a random message from the message space; b2. Encrypt the public key and the random message to obtain a ciphertext; b3. Calculate the shared key using the random message and ciphertext; b4. Output the encapsulation result shared key and ciphertext.

[0010] Preferably, in step b2, the encryption function The encryption process obtains the ciphertext.

[0011] Preferably, in step b3, a shared key is generated by hash function calculation.

[0012] Preferably, in step S3, the user terminal uses a key decapsulation function The decapsulation process includes the following steps: c1. Use the private key and ciphertext to pass the decryption function Decryption processing obtains a decryption result; c2. Determine whether the decryption result is a null value. If the decryption result is a null value, output shared key 1; otherwise, output shared key 2.

[0013] Preferably, in step S5, the user terminal generates a key confirmation message 1 and an associated header message 3 respectively by using a shared key and a static shared key; The server generates a key confirmation message 2 and an associated header message 4 using the shared key and the static shared key respectively.

[0014] Beneficial effects of the present invention: First of all, compared with other internationally standardized post-quantum encryption algorithms, the domestically produced post-quantum encryption algorithm LAC has a higher computing speed and smaller space occupancy, and its overall performance is superior. The computational complexity of the IND-1-CCA secure post-quantum key encapsulation mechanism is generally smaller than that of the IND-CCA secure post-quantum key encapsulation mechanism.

[0015] Secondly, compared with the TLS protocol, the KEMTLS protocol can complete identity authentication without the need for digital signature operations, has higher performance, and does not require the IND-CCA secure post-quantum key encapsulation mechanism. The IND-1-CCA secure post-quantum key encapsulation mechanism can meet the requirements; In summary, a secure post-quantum key encapsulation mechanism IND-1-CCA is designed based on the LAC encryption algorithm and adapted to the KEMTLS protocol framework. Compared with existing designs, it has higher performance in both the underlying encapsulation method and the upper-layer protocol. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 It is the LAC public key encryption algorithm process; Figure 2 The IND-1-CCA secure post-quantum key encapsulation mechanism designed for the present invention; Figure 3 A two-end communication protocol adapted for the present invention. DETAILED DESCRIPTION

[0017] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0018] The calculation process of the domestic post-quantum public key encryption algorithm LAC is as follows: 1. Key generation function process: (1) Randomly sample seeds according to uniform distribution : ; (2) Generate ring elements using rejection sampling method : ; (3) Randomly sampling private key elements and noise : ; (4) Calculate the public key elements : ; (5) Output the public and private key pair and : , .

[0019] 2. Encryption function process: (1) Input: random message to be signed , public key ; (2) Generate ring elements : ; (3) Encoding a secret random message get : ; (4) Sampling random numbers and noise : ; (5) Sampling noise : ; (6) Calculate ciphertext elements : ; (7) Calculate ciphertext elements : ; (8) Output ciphertext : .

[0020] 3. Decryption function process: (1) Input: ciphertext , private key ; (2) Calculate polynomial : ; (3) Calculate polynomial : ; (4) Output decryption results : .

[0021] Based on the above public key encryption algorithm, a post-quantum key encapsulation method can be designed. For a hash function, the IND-1-CCA optimization design process of the post-quantum key encapsulation method is as follows: 1. Key generation function process: (1) Generate a public-private key pair ; (2) Output results: .

[0022] 2. Key Encapsulation Function process: (1) From the message space Generate a random message : ; (2) Encrypted random message Get the ciphertext : ; (3) Calculate the shared key : ; (4) Output packaging results: .

[0023] 3. Key decapsulation function process: (1) Calculate the decryption result : ; (2) If the decryption result If it is a null value, output the shared key 1. ; Otherwise, output the shared key 2, .

[0024] Compared with the existing IND-CCA secure scheme, the IND-1-CCA optimized design has less computational complexity and higher computational performance in practical applications.

[0025] Adapted to KEMTLS, the designed post-quantum network communication protocol two-end communication process is as follows: Communicating parties: (1) User side; (2) Server side: static public-private key pair .

[0026] Communication process: (1) User side Server: sends the first handshake request message (TCP SYN); (2) Server User side: sends the first handshake request response message (TCP SYN-ACK); (3) User side Server side: Calculate the public and private key pair , send the public key ; (4) Server Client: Calculate the shared key and ciphertext and variables , send ciphertext and associated header message 1 ;in, is the key derivation function, To associate the header message; (5) User side Server side: Calculate the shared secret ,variable and static shared keys and static ciphertext , send associated header message 2 ,in, To associate the header message; (6) Server: Calculate the static shared key ; (7) Both ends: Calculate key 1 ; (8) User side Server: Send and , respectively associated header information 3 related to key confirmation 1 and application data; (9) Server User: Send and , respectively associated header information 4 related to key confirmation 2 and application data; In the existing implementation of KEMTLS, compared with the integration schemes of other post-quantum cryptographic algorithms, this scheme has higher computing speed and smaller space occupancy, and the overall computational complexity of the IND-1-CCA secure post-quantum key encapsulation mechanism is smaller than that of the IND-CCA secure scheme. Therefore, under the premise of meeting security requirements, the overall performance of this scheme is superior.

[0027] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modification, equivalent substitution or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A network communication protocol based on a post-quantum key encapsulation method, characterized in that: Including a user end, a server end and a static public-private key pair, the two-end communication process includes the following steps: S1. The server responds to the service request message sent by the user and encapsulates the public key generated and sent by the user; S2, the server side feeds back the output encapsulation result and the generated associated header message to the user side; S3, the user end decapsulates the encapsulation result to obtain the shared key, and generates a second associated header message to send to the server end; S4, both ends generate a static shared key through a static public-private key pair; S5. The server receives the key confirmation message 1 and the associated header message 3 sent by the user, and feeds back the key confirmation message 2 and the associated header message 4 to the user.

2. A network communication protocol based on a post-quantum key encapsulation method according to claim 1, characterized in that: In step S1, the user terminal generates a key through a key generation function Generate a public-private key pair, including the following steps: a1. Randomly sample seeds; a2. Generate ring elements using the seed through rejection sampling method; a3. Randomly sample the private key elements and noise; a4. Calculate the public key element through the ring element, private key element and noise; a5. Use the seed, public key element and private key element to assign values ​​and output the public-private key pair.

3. A network communication protocol based on a post-quantum key encapsulation method according to claim 1, characterized in that: In step S1, the server uses a key encapsulation function The packaging process includes the following steps: b1. Generate a random message from the message space; b2. Encrypt the public key and the random message to obtain a ciphertext; b3. Calculate the shared key using the random message and ciphertext; b4. Output the encapsulation result shared key and ciphertext.

4. A network communication protocol based on a post-quantum key encapsulation method according to claim 3, characterized in that: In step b2, the encryption function The encryption process obtains the ciphertext.

5. A network communication protocol based on a post-quantum key encapsulation method according to claim 3, characterized in that: In step b3, a shared key is generated by hash function calculation.

6. A network communication protocol based on a post-quantum key encapsulation method according to claim 1, characterized in that: In step S3, the user terminal uses the key decapsulation function The decapsulation process includes the following steps: c1. Use the private key and ciphertext to pass the decryption function Decryption processing obtains a decryption result; c2. Determine whether the decryption result is a null value. If the decryption result is a null value, output shared key 1; otherwise, output shared key 2.

7. A network communication protocol based on a post-quantum key encapsulation method according to claim 1, characterized in that: In the step S5, The user end generates a key confirmation message 1 and an associated header message 3 respectively by using the shared key and the static shared key; The server generates a key confirmation message 2 and an associated header message 4 using the shared key and the static shared key respectively.

Images