Post-fusion quantum algorithm implicit certificate public key processing method, system and user end

Abstract

This application provides a method, system, and client for processing implicit certificate public keys using a post-quantum algorithm, relating to the field of cryptographic application technology. The method includes: the client obtaining the target user's national cryptographic user declaration public key from a trusted institution; the client generating a national cryptographic user public-private key pair for the target user based on the national cryptographic user declaration public key; the client generating a post-quantum user public-private key pair for the target user; the client obtaining the post-quantum user declaration public key from the trusted institution based on the national cryptographic user public key in the national cryptographic user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair; the client concatenating the national cryptographic user declaration public key and the post-quantum user declaration public key to obtain the target user's hybrid declaration public key, and publicly disclosing the hybrid declaration public key to the public key user; the hybrid declaration public key is used for encryption / decryption processing or signature verification processing of the target user's implicit certificate, enabling the implicit certificate public key to resist quantum algorithm attacks.

Description

Technical Field

[0001] This invention relates to the field of cryptographic application technology, and more specifically, to a method, system, and client for implicit certificate public key processing based on a fused quantum algorithm. Background Technology

[0002] Implicit certificates are a new type of digital certificate scheme in the Public Key Infrastructure (PKI) system. They are based on elliptic curve cryptography and do not include the signatures of the certificate signing authority and certificate issuing authority during the authentication process. The verifier needs to calculate the public key of the implicit certificate owner based on the data and perform cryptographic operations using the public key.

[0003] However, existing solutions rely on implicit certificate public keys generated by elliptic curve cryptography, while the quantum algorithm Shor's algorithm can solve problems such as integer factorization and discrete logarithms. Therefore, implicit certificate verification methods based on traditional asymmetric cryptography face a huge threat. Summary of the Invention

[0004] The purpose of this invention is to address the shortcomings of the prior art by providing a method, system, and client for processing implicit certificate public keys that integrates post-quantum algorithms. This allows for the hybrid use of post-quantum cryptography on top of the traditional implicit certificate public key generation based on the elliptic curve cryptography algorithm SM2, so that the generated implicit certificate public key not only meets the requirements of the existing security system but also resists attacks by quantum algorithms.

[0005] To achieve the above objectives, the technical solutions adopted in the embodiments of this application are as follows:

[0006] In a first aspect, embodiments of this application provide an implicit certificate public key processing method based on a fused quantum algorithm, applied to an implicit certificate public key system. The implicit certificate public key system includes: an authority's end, a public key user's end, and a user's end. The method includes:

[0007] The user terminal obtains the target user's national cryptographic user declaration public key from the trust institution's institution.

[0008] The user terminal generates the target user's public-private key pair based on the public key declared by the national cryptographic user.

[0009] The user terminal generates the post-quantum user public-private key pair for the target user;

[0010] The user terminal obtains the post-quantum user declaration public key from the trust institution's institution based on the national cryptographic user public key in the national cryptographic user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair;

[0011] The user terminal concatenates the national cryptographic user declaration public key and the post-quantum user declaration public key to obtain the target user's hybrid declaration public key, and publishes the hybrid declaration public key to the public key user terminal; the hybrid declaration public key is used to encrypt or decrypt or sign and verify the target user's implicit certificate.

[0012] In an optional implementation, the user terminal obtains the target user's national cryptographic user declaration public key from the trusted institution, including:

[0013] The user terminal uses a preset national cryptographic algorithm to generate a temporary public-private key pair for the target user;

[0014] The user terminal obtains the national cryptographic user declaration public key and the national cryptographic user private key component from the trust institution's institution based on the temporary user public key in the temporary user public-private key pair;

[0015] The user terminal generates a public-private key pair for the target user based on the public key declared by the national cryptographic user, including:

[0016] The user terminal generates the target user's national cryptographic user private key based on the national cryptographic user private key component and the temporary user private key in the temporary user public-private key pair;

[0017] The user terminal generates the target user's national cryptographic user public key based on the national cryptographic user declaration public key and the national cryptographic master public key of the trusted institution obtained in advance.

[0018] In an optional implementation, the user terminal generates the post-quantum user public-private key pair for the target user, including:

[0019] The user terminal uses a preset post-quantum algorithm to generate the post-quantum user public-private key pair for the target user.

[0020] In an optional implementation, the user terminal obtains the post-quantum user declaration public key from the trusted institution based on the national cryptographic user public key in the national cryptographic user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair, including:

[0021] The user terminal sends the national cryptographic user public key and the post-quantum user public key to the trust institution's institution terminal;

[0022] The trust institution generates and publishes the post-quantum user declaration public key to the user terminal based on the national cryptographic user public key, the post-quantum user public key, the trust institution's national cryptographic master public key, and the post-quantum master public key.

[0023] In an optional implementation, the trust institution's terminal generates and publishes the post-quantum user declaration public key to the user terminal based on the national cryptographic user public key, the post-quantum user public key, the trust institution's national cryptographic master public key, and the post-quantum master public key, including:

[0024] The trust institution generates post-quantum public key signature data based on the national cryptographic user public key, the post-quantum user public key, the national cryptographic master public key of the trust institution, and the post-quantum master public key.

[0025] The trust institution concatenates the post-quantum public key signature data and the post-quantum user public key to generate and publish the post-quantum user declaration public key to the user.

[0026] In an optional implementation, the method further includes:

[0027] The public key user decrypts the hybrid declaration public key to obtain the national cryptographic user declaration public key and the post-quantum user declaration public key;

[0028] The public key user terminal obtains the national cryptographic user public key and the post-quantum user public key respectively based on the national cryptographic user declaration public key and the post-quantum user declaration public key;

[0029] The public key user encrypts and verifies the implicit certificate of the target user based on the national cryptographic user public key and the post-quantum user public key.

[0030] In an optional implementation, the public key user obtains the national cryptographic user public key and the post-quantum user public key based on the national cryptographic user declaration public key and the post-quantum user declaration public key, respectively, including:

[0031] The public key user calculates the national cryptographic user public key based on the national cryptographic user declaration public key and the national cryptographic master public key of the trusted institution;

[0032] The public key user parses the post-quantum user-declared public key to obtain the post-quantum user public key and the corresponding post-quantum public key signature data.

[0033] In an optional implementation, the public key user parses the post-quantum user-declared public key to obtain the post-quantum user public key and the corresponding post-quantum public key signature data, including:

[0034] The public key user verifies the signature data of the post-quantum public key based on the national cryptographic user public key, the post-quantum user public key, the national cryptographic master public key, and the post-quantum master public key.

[0035] Secondly, embodiments of this application also provide an implicit certificate public key system, which includes: an institution end of a trust authority, a public key user end, and a user end. The implicit certificate public key system is used to execute the steps of the implicit certificate public key processing method of the fused quantum algorithm as described in any of the first aspects.

[0036] Thirdly, embodiments of this application also provide a user terminal, including: a processor, a storage medium, and a bus. The storage medium stores program instructions executable by the processor. When the user terminal is running, the processor communicates with the storage medium via the bus, and the processor executes the steps of the implicit certificate public key processing method of the fused quantum algorithm as described in any of the first aspects.

[0037] The beneficial effects of this application are:

[0038] This application provides a method, system, and user terminal for implicit certificate public key processing using a fusion post-quantum algorithm. The method includes: the user terminal obtaining the target user's national cryptographic user declaration public key from the institution of a trusted authority; the user terminal generating a national cryptographic user public-private key pair for the target user based on the national cryptographic user declaration public key; the user terminal generating a post-quantum user public-private key pair for the target user; the user terminal obtaining the post-quantum user declaration public key from the institution of the trusted authority based on the national cryptographic user public key in the national cryptographic user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair; the user terminal concatenating the national cryptographic user declaration public key and the post-quantum user declaration public key to obtain the target user's hybrid declaration public key, and disclosing the hybrid declaration public key to the public key user; the hybrid declaration public key is used for encryption / decryption processing or signature verification processing of the target user's implicit certificate. The method in this application, based on the traditional implicit certificate public key generated by the elliptic curve cryptography algorithm SM2, incorporates post-quantum cryptography. This allows the implicit certificate public key generated by this application to not only meet the requirements of existing security systems but also resist attacks by quantum algorithms. By using the hybrid declaration public key, the method enables encryption / decryption or signature verification of the implicit certificate of the target user. Attached Figure Description

[0039] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present invention and should not be regarded as a limitation on the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0040] Figure 1 One of the schematic diagrams of an implicit certificate public key processing method based on a fused quantum algorithm provided in this application embodiment;

[0041] Figure 2A second schematic diagram illustrating an implicit certificate public key processing method based on a fused quantum algorithm, provided in an embodiment of this application;

[0042] Figure 3 The third schematic diagram illustrates an implicit certificate public key processing method based on a fused quantum algorithm, as provided in this application embodiment.

[0043] Figure 4 The fourth schematic diagram illustrates an implicit certificate public key processing method based on a fused quantum algorithm, as provided in this application embodiment.

[0044] Figure 5 Fifth schematic diagram of an implicit certificate public key processing method based on a fused quantum algorithm provided in this application embodiment;

[0045] Figure 6 A schematic diagram (sixth) of an implicit certificate public key processing method based on a fused quantum algorithm provided in this application embodiment;

[0046] Figure 7 This is a schematic diagram of an implicit certificate public key generation method based on a fused quantum algorithm, provided in an embodiment of this application. Detailed Implementation

[0047] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are some embodiments of the present invention, but not all embodiments.

[0048] Therefore, the following detailed description of the embodiments of this application provided in the accompanying drawings is not intended to limit the scope of the claimed application, but merely to illustrate selected embodiments of the application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without inventive effort are within the scope of protection of this application.

[0049] In the description of this application, it should be noted that if the terms "upper", "lower", etc. appear to indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings, or the orientation or positional relationship that the product of this application is usually placed in, it is only for the convenience of describing this application and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this application.

[0050] Furthermore, the terms "first," "second," etc., used in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Additionally, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0051] It should be noted that, where there is no conflict, the features in the embodiments of this application can be combined with each other.

[0052] An Elliptic Curve Qu-Vanstone Implicit Certificate (ECQV) is a certificate authentication mechanism based on elliptic curves. It does not include the signature of the certificate issuing authority, and the verifier needs to calculate the public key of the implicit certificate owner based on the certificate data and perform cryptographic operations using the public key.

[0053] Currently, certificateless and implicit certificate public key generation schemes based on the Elliptic Curve Cryptography (SM2) algorithm involve the following steps: The institution first generates its master public-private key pair, and the user generates a temporary user public-private key pair. Then, the institution generates a user-claimed public key and a user-defined private key component based on the user's identifier, the temporary public key, and the institution's master public-private key pair. The user then generates their private key based on the temporary private key and the user-defined private key component. Finally, the user calculates their public key using the user-claimed public key and the institution's master public key. This user public key is the public key for certificateless and implicit certificates. This scheme binds the generated user public key with the institution's public key, achieving a similar effect to certificates. However, the quantum algorithm Shor's algorithm can solve problems such as integer factorization and discrete logarithms. Therefore, implicit certificate public keys generated based on the SM2 algorithm are vulnerable to quantum algorithm attacks.

[0054] Post-quantum cryptography (PQC) algorithms can effectively resist attacks from quantum computing and meet the security requirements of the post-quantum era. However, PQC also suffers from problems such as a lack of effective security proofs and inability to meet existing security evaluation standards. Therefore, this application provides an implicit certificate public key processing method that integrates PQC algorithms. It combines PQC with traditional implicit certificate public key generation based on the elliptic curve cryptography algorithm SM2, so that the implicit certificate public key generated by this application can both meet the requirements of the existing security system and resist attacks from quantum algorithms.

[0055] This application also provides an implicit certificate public key system for executing the implicit certificate public key processing method based on the fused quantum algorithm provided in this application. The implicit certificate public key system includes: a trust authority's endpoint, a public key user endpoint, and a user endpoint. The user endpoint obtains the target user's national cryptographic user declaration public key from the trust authority's endpoint, generates a national cryptographic user public-private key pair based on the national cryptographic user declaration public key, generates a post-quantum user public-private key pair for the target user, obtains the post-quantum user declaration public key from the trust authority based on the national cryptographic user public key in the national cryptographic user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair, concatenates the national cryptographic user declaration public key and the post-quantum user declaration public key to obtain the target user's hybrid declaration public key, and publishes the hybrid declaration public key to the public key user endpoint. The hybrid declaration public key is used for encryption / decryption processing or signature verification processing of the target user's implicit certificate.

[0056] The following detailed explanation, with reference to the accompanying drawings and specific examples, illustrates the implicit certificate public key processing method of the fused quantum algorithm provided in this application. This method is applied to an implicit certificate public key system, which includes: a trust authority, a public key user, and a user terminal. Figure 1 One of the schematic diagrams of an implicit certificate public key processing method based on a fused quantum algorithm provided in this application embodiment; as shown Figure 1 As shown, the method includes:

[0057] S101. The user terminal obtains the target user's national cryptographic user declaration public key from the trusted institution's institution.

[0058] S102. The user terminal generates the target user's public-private key pair based on the public key declared by the national cryptographic user.

[0059] S103. The user terminal generates the target user's post-quantum user public-private key pair.

[0060] S104. The user terminal obtains the post-quantum user declaration public key from the trust institution's terminal based on the national cryptographic user public key in the national cryptographic user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair.

[0061] S105. The user terminal concatenates the national cryptographic user declaration public key and the post-quantum user declaration public key to obtain the target user's hybrid declaration public key, and publishes the hybrid declaration public key to the public key user terminal.

[0062] The hybrid public key is used to encrypt or decrypt the implicit certificate of the target user or to verify its signature.

[0063] In this embodiment, the generation process of the implicit certificate public key of the fused quantum algorithm includes multiple stages, namely the master key stage, the key declaration stage, and the public key usage stage.

[0064] During the master key phase, the trust institution generates corresponding national cryptographic master public-private key pairs and post-quantum master public-private key pairs, respectively. Then, it publishes the national cryptographic master public key and the post-quantum master public key. Specifically, based on a generated first random number, the trust institution uses a preset national cryptographic key generation algorithm to generate the trust institution's national cryptographic master public key. The first random number is the national cryptographic master private key. The trust institution's national cryptographic master public-private key pair includes: the trust institution's national cryptographic master public key P, and the first random number sk. The generated national cryptographic master public key P is represented as: P = [sk]G, where G is the base point of SM2. Based on a generated second random number, the trust institution uses a preset post-quantum algorithm to generate the trust institution's post-quantum master public key. The trust institution's post-quantum master public-private key pair includes: the trust institution's post-quantum master public key P. PQC and the second random number sk PQC .

[0065] During the key declaration phase, the user terminal obtains the target user's national cryptographic user declaration public key W from the trusted institution. A And based on the public key W declared by the national cryptographic user A Generate the target user's national cryptographic public-private key pair, which includes: the target user's national cryptographic public key P. A and the private key of the user of the national cryptographic system d A .

[0066] During the key declaration phase, the user also generates a post-quantum user public-private key pair for the target user. This post-quantum user public-private key pair includes: the post-quantum user public key P. APQC and the private key of the user of the national cryptographic system d APQC .

[0067] Optionally, the user terminal uses a preset post-quantum algorithm to generate the target user's post-quantum public-private key pair.

[0068] Specifically, the user terminal uses the post-quantum key generation algorithm in the preset post-quantum algorithm to generate a post-quantum user public-private key pair.

[0069] During the key declaration phase, the user sends the national cryptographic user public key P to the trusted authority. A and post-quantum user public key P APQC This enables the trusted institution to use the national cryptographic user public key P. A and post-quantum user public key P APQC After generation, the quantum user declares the public key W. APQC After returning the quantum user's public key W to the user's end, APQC .

[0070] During the key declaration phase, the user terminal declares the public key W, a national cryptographic user key obtained from the trusted institution. A And post-quantum user-claimed public key W APQC By concatenating the public keys, we obtain the target user's hybrid claim public key W, which is represented as: W = W A ||W APQC It also publishes the hybrid declaration public key to the public key user, so that during the public key usage phase, the public key user can use the hybrid declaration public key to encrypt or verify the implicit certificate of the target user.

[0071] In addition, the generation process of the implicit certificate public key of the integrated quantum algorithm also includes a private key usage stage, in which the user terminal decrypts or signs the implicit certificate of the target user based on the national cryptographic user private key and the post-quantum user private key.

[0072] In summary, this application provides a method for processing implicit certificate public keys using a fusion post-quantum algorithm, applied to an implicit certificate public key system. The method includes: a user terminal obtaining a target user's national cryptographic user declaration public key from a trusted institution; the user terminal generating a national cryptographic user public-private key pair for the target user based on the national cryptographic user declaration public key; the user terminal generating a post-quantum user public-private key pair for the target user; the user terminal obtaining a post-quantum user declaration public key from the trusted institution based on the national cryptographic user public key in the national cryptographic user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair; the user terminal concatenating the national cryptographic user declaration public key and the post-quantum user declaration public key to obtain a hybrid declaration public key for the target user, and publicly disclosing the hybrid declaration public key to the public key user; the hybrid declaration public key is used for encryption / decryption processing or signature verification processing of the target user's implicit certificate. The method in this application, based on the traditional implicit certificate public key generated by the elliptic curve cryptography algorithm SM2, incorporates post-quantum cryptography. This allows the implicit certificate public key generated by this application to not only meet the requirements of existing security systems but also resist attacks by quantum algorithms. By using the hybrid declaration public key, the method enables encryption / decryption or signature verification of the implicit certificate of the target user.

[0073] This application also provides another possible implementation of the implicit certificate public key processing method based on the fused quantum algorithm. Figure 2 This is a second schematic diagram illustrating an implicit certificate public key processing method based on a fused quantum algorithm, as provided in an embodiment of this application. Figure 2 As shown, the user terminal obtains the target user's national cryptographic user declaration public key from the trusted institution, including:

[0074] S201. The user terminal uses a preset national cryptographic algorithm to generate a temporary public-private key pair for the target user.

[0075] S202. The user terminal obtains the national cryptographic user declaration public key and the national cryptographic user private key component from the trusted institution's institution based on the temporary user public key in the temporary user public-private key pair.

[0076] In this embodiment, during the master key stage, the user terminal uses the national cryptographic key generation algorithm from the preset national cryptographic algorithms to generate a temporary user public-private key pair (d') for the target user. A U A ), where, (d' A U A )=(Randd' A ,[d' A ]G), d' A U is the temporary private key for the target user. A This is the target user's temporary public key.

[0077] During the key declaration phase, the user sends a temporary user public key to the trusted institution, which is to send a request to the institution to declare the target user's national cryptographic user public key.

[0078] During the key declaration phase, the trust institution receives the temporary user public key sent by the user, generates a third random number w, and then uses the third random number w and the temporary user public key U to declare the key. A Generate the national cryptographic user declaration public key W A Among them, W A =U A +[w]G. And return the public key W, the national cryptographic user statement public key for the target user, from the trusted authority to the user terminal. A .

[0079] Additionally, during the master key phase, the trusted institution generates a national cryptographic user public key parameter for the target user, represented as: H A =H 256 (ENTL A ||ID A ||a||b||x G ||y G ||x P ||y P ), where H A H represents the national cryptographic user public key parameter of the target user generated by the trusted institution. 256 () represents the digest function that outputs 256 bits, ID A Let x be the identifier for target user A. G ,y G Represented as the coordinates of the base point, x P ,y P This represents the coordinates of the national cryptographic master key of the trusted institution.

[0080] During the key declaration phase, the trust institution generates the user private key parameters for the target user based on the national cryptographic user public key parameters and the national cryptographic user declaration public key.

[0081] Specifically, the private key parameters generated by the trusted institution for the target user are represented as follows:

[0082] λ=H 256 (x WA ||y WA ||H A )mod n

[0083] Where λ represents the target user's private key parameter generated by the trust institution, and H 256 () represents the digest function that outputs 256 bits, x WA ,y WAThis represents the coordinates of the public key of the national cryptographic user statement for the target user, provided by a trusted institution.

[0084] The trust institution generates and returns a national cryptographic user private key component for the target user based on the user private key parameters for the target user, a first random number, and a third random number.

[0085] Specifically, the user's private key component for the target user is represented as follows:

[0086] t A =w + λ·sk mod n

[0087] Among them, t A This represents the user's private key component generated by the trusted institution for the target user, w represents the third random number, and sk represents the first random number.

[0088] Based on the above, the user terminal generates the target user's public / private key pair according to the national cryptographic user declaration public key, including:

[0089] S203. The user terminal generates the target user's national cryptographic user private key based on the national cryptographic user private key component and the temporary user private key in the temporary user public-private key pair.

[0090] S204. The user terminal generates the target user's national cryptographic user public key based on the national cryptographic user declaration public key and the national cryptographic master public key of the trusted institution obtained in advance.

[0091] Specifically, during the key declaration phase, the user terminal uses the national cryptographic user private key component t. A and temporary user private key d' A Generate the target user's national cryptographic user private key d A The expression for generating a user's private key using the national cryptographic standard is: d A =t A +d' A mod n.

[0092] The user terminal also uses the public key W declared in the national cryptographic user statement. A Using the pre-obtained national cryptographic master public key P from a trusted institution, generate the target user's national cryptographic user public key P. A .

[0093] Specifically, the user terminal uses the target user's identifier ID. A Generate the national cryptographic master public key P and the national cryptographic user public key parameter H. A Then, based on the national cryptographic user public key parameter H A And the national cryptographic user declares public key W A Generate the user's private key parameter λ, and finally, based on the user's private key parameter λ, the national cryptographic master public key P of the trusted institution, and the user's declared public key W... AGenerate the target user's national cryptographic public key P A The public key of the target user is represented as: P A =W A +[λ]P.

[0094] Alternatively, the user terminal generates the target user's national cryptographic public key based on the national cryptographic user's private key, expressed as: P A =[d A ]G, where the public keys of the national cryptographic user generated by the two methods can be compared to determine whether they are consistent. If they are consistent, the verification is successful.

[0095] In the method provided in this application embodiment, the user terminal uses a preset national cryptographic algorithm to generate a temporary user public-private key pair for the target user. Based on the temporary user public key in the temporary user public-private key pair, the user terminal obtains the national cryptographic user declaration public key and the national cryptographic user private key component from the trust institution. Based on the national cryptographic user private key component and the temporary user private key in the temporary user public-private key pair, the user terminal generates the national cryptographic user private key for the target user. Based on the national cryptographic user declaration public key and the pre-obtained national cryptographic master public key of the trust institution, the user terminal generates the national cryptographic user public-private key pair for the target user.

[0096] This application also provides another possible implementation of the implicit certificate public key processing method based on the fused quantum algorithm. Figure 3 The third schematic diagram illustrates an implicit certificate public key processing method based on a fused quantum algorithm, as provided in this application embodiment. Figure 4 This is the fourth schematic diagram of an implicit certificate public key processing method based on a fused quantum algorithm provided in this application embodiment, as shown below. Figure 3 As shown, the user terminal obtains the post-quantum user declaration public key from the trusted institution based on the national cryptographic user public key in the national cryptographic user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair, including:

[0097] S301. The user sends the national cryptographic user public key and the post-quantum user public key to the trusted institution.

[0098] S302. The trust institution generates and publishes the post-quantum user declaration public key to the user based on the national cryptographic user public key, the post-quantum user public key, the trust institution's national cryptographic master public key, and the post-quantum master public key.

[0099] In this embodiment, during the key declaration stage, the user sends the national cryptographic user public key and the post-quantum user public key to the trust institution, that is, sends a request to the trust institution to obtain the post-quantum user declaration public key.

[0100] The trust institution generates and publishes the post-quantum user declaration public key to the user based on the national cryptographic user public key, the post-quantum user public key, the trust institution's national cryptographic master public key, and the post-quantum master public key.

[0101] Optionally, step S302 further includes:

[0102] S401. The trust institution generates post-quantum public key signature data based on the national cryptographic user public key, the post-quantum user public key, the trust institution's national cryptographic master public key, and the post-quantum master public key.

[0103] S402. The trust institution concatenates the post-quantum public key signature data and the post-quantum user public key to generate and publish the post-quantum user declaration public key to the user.

[0104] Specifically, such as Figure 4 As shown, the trust institution's terminal uses the national cryptographic user public key P. A Post-quantum user public key P APQC The national cryptographic master public key P and the post-quantum master public key P of the trusted institution PQC After calculation, the quantum public key signature data S APQC Post-quantum public key signature data S APQC The calculation expression is:

[0105] S APQC =sign(sk PQC H 512 (P APQC ||P A ||P PQC ||P))

[0106] Among them, H 512 For a digest function with an output length of 512 bits, increasing the output length of the hash function can effectively resist quantum search algorithms.

[0107] Trusted institution's end-to-end quantum public key signature data S APQC and post-quantum user public key P APQC After concatenation, the quantum user declares the public key W and generates it, which is then published to the user terminal. APQC Post-quantum user declares public key W APQC Represented as: W APQC =P APQC ||S APQC .

[0108] In the method provided in this application embodiment, the user terminal sends a national cryptographic user public key and a post-quantum user public key to the trusted institution. The trusted institution, based on the national cryptographic user public key, the post-quantum user public key, the trusted institution's national cryptographic master public key, and the post-quantum master public key, generates and publishes a post-quantum user declaration public key to the user terminal. The post-quantum user declaration public key generated by the trusted institution is used to resist attacks from quantum algorithms.

[0109] This application also provides another possible implementation of the implicit certificate public key processing method based on the fused quantum algorithm. Figure 5 This is the fifth schematic diagram of an implicit certificate public key processing method based on a fused quantum algorithm provided in this application embodiment, as shown below. Figure 5 As shown, the method also includes:

[0110] S501. The public key user decrypts the hybrid declaration public key to obtain the national cryptographic user declaration public key and the post-quantum user declaration public key.

[0111] S502. The public key user obtains the national cryptographic user public key and the post-quantum user public key respectively based on the national cryptographic user declaration public key and the post-quantum user declaration public key.

[0112] S503. The public key user encrypts and verifies the implicit certificate of the target user based on the national cryptographic user public key and the post-quantum user public key.

[0113] In this embodiment, during the public key usage phase, the public key user decrypts the hybrid declaration public key W to obtain the national cryptographic user declaration public key W. A And post-quantum user-claimed public key W APQC Then, based on the public key W declared by the national cryptographic user... A And post-quantum user-claimed public key W APQC Obtain the national cryptographic user public key P respectively A and post-quantum user public key P APQC .

[0114] The public key user uses the national cryptographic user public key P. A and post-quantum user public key P APQC Before verifying the implicit certificate of the target user, the user terminal uses a preset national cryptographic signature algorithm to sign the data to be verified based on the user's private key, thus obtaining the national cryptographic signature data S. SM2 It employs a pre-defined post-quantum signature algorithm to sign the data to be verified based on the post-quantum user's private key, thereby obtaining the post-quantum signature data S. PQC Then, the data to be verified and the national cryptographic signature data S SM2 and post-quantum signature data S PQC Send to the public key user.

[0115] The public key user uses a preset national cryptographic signature verification algorithm, based on the national cryptographic user public key P. A For national cryptographic signature data S SM2 Signature verification is performed to obtain national cryptographic signature verification data, and a preset post-quantum signature verification algorithm is used based on the post-quantum user public key P. APQC For post-quantum signature data S PQC Signature verification is performed to obtain post-quantum signature verification data. Then, the consistency between the national cryptographic signature verification data and the data to be verified is compared, and the consistency between the post-quantum signature verification data and the data to be verified is also compared to obtain the verification result and determine whether the data transmission is complete.

[0116] The public key user uses the national cryptographic user public key P. A and post-quantum user public key P APQC The implicit certificate encryption for the target user involves splitting the data to be encrypted into a first data to be encrypted and a second data to be encrypted. The public key user uses a preset national cryptographic encryption algorithm, based on the national cryptographic user public key P. A The first piece of data to be encrypted is encrypted to obtain the national standard cryptographic ciphertext sm2enc, and then a preset post-quantum encryption algorithm is used, based on the post-quantum user public key P. APQC The second data to be encrypted is encrypted to obtain the post-quantum encrypted ciphertext pqcenc. Then, the national standard encrypted ciphertext sm2enc and the post-quantum encrypted ciphertext pqcenc are encapsulated to obtain the hybrid encrypted ciphertext, which is then sent to the user terminal.

[0117] After receiving the hybrid encrypted ciphertext, the user terminal decapsulates it to obtain the national cryptographic encryption ciphertext sm2enc and the post-quantum encryption ciphertext pqcenc. Then, using a preset national cryptographic decryption algorithm and the user's private key, the national cryptographic encryption ciphertext sm2enc is decrypted to obtain the first data to be encrypted. Then, using a preset post-quantum decryption algorithm and the user's private key, the post-quantum encryption ciphertext pqcenc is decrypted to obtain the second data to be encrypted. Finally, the first and second data to be encrypted are concatenated to obtain the data to be encrypted.

[0118] In the method provided in this application embodiment, the public key user decrypts the hybrid declaration public key to obtain a national cryptographic user declaration public key and a post-quantum user declaration public key. The public key user then obtains the national cryptographic user public key and the post-quantum user public key based on the national cryptographic user declaration public key and the post-quantum user declaration public key, respectively. The public key user then uses the national cryptographic user public key and the post-quantum user public key to encrypt and verify the implicit certificate of the target user. By using the two public keys, the encryption and verification of the implicit certificate of the target user can effectively resist attacks by quantum algorithms.

[0119] This application also provides another possible implementation of the implicit certificate public key processing method based on the fused quantum algorithm. Figure 6 This is the sixth schematic diagram of an implicit certificate public key processing method based on a fused quantum algorithm provided in this application embodiment, as shown below. Figure 6 As shown, the public key user obtains the national cryptographic user public key and the post-quantum user public key based on the national cryptographic user-declared public key and the post-quantum user-declared public key, respectively, including:

[0120] S601. The public key user calculates the national cryptographic user public key based on the national cryptographic user's declared public key and the national cryptographic master public key of the trusted institution.

[0121] In this embodiment, during the public key usage phase, the public key user employs a preset national cryptographic algorithm and uses the public key W declared by the national cryptographic user. A Using the national cryptographic master public key P, calculate the national cryptographic user public key P. A Specifically, based on the target user's identifier ID A Generate the national cryptographic master public key P and the national cryptographic user public key parameter H. A Then, based on the national cryptographic user public key parameter H A And the national cryptographic user declares public key W A Generate the user's private key parameter λ, and finally, based on the user's private key parameter λ, the national cryptographic master public key P of the trusted institution, and the user's declared public key W... A Generate the target user's national cryptographic public key P A The public key of the target user is represented as: P A =W A +[λ]P.

[0122] S602. The public key user parses the post-quantum user's declared public key to obtain the post-quantum user's public key and the corresponding post-quantum public key signature data.

[0123] Specifically, the public key user declares the public key W to the post-quantum user. APQC The post-quantum user public key P is obtained through parsing. APQC and the corresponding post-quantum public key signature data S APQC .

[0124] Optionally, the public key user verifies the post-quantum public key signature data based on the national cryptographic user public key, the post-quantum user public key, the national cryptographic master public key, and the post-quantum master public key.

[0125] Specifically, the public key user uses the quantum master public key P. PQC , with P APQC ||P A ||P PQC ||P represents the quantum public key signature data S after verification of the original text. APQC If the verification passes, the post-quantum user public key P is determined.APQC If the verification is successful, the public key user can encrypt and verify the implicit certificate of the target user based on the national cryptographic user public key and the post-quantum user public key.

[0126] Figure 7 A schematic diagram illustrating an implicit certificate public key generation method based on a fused quantum algorithm provided in this application embodiment is shown below. Figure 7 As shown, during the master key phase, the trust institution generates the corresponding national cryptographic master public-private key pair (sk, P) and the post-quantum master public-private key pair (sk). PQC ,P PQC ), and generate the national cryptographic user public key parameter H for the target user. A The user terminal uses the national cryptographic key generation algorithm from the preset national cryptographic algorithms to generate a temporary public-private key pair (d') for the target user. A U A ).

[0127] During the key declaration phase, the user sends a temporary user public key U to the trusted institution. A That is, the system sends a request for the target user's national cryptographic user declaration public key to the institution, and the institution receives the temporary user public key U sent by the user. A Generate a third random number, and then use the third random number w and the temporary user public key U... A Generate the national cryptographic user declaration public key W A The trusted institution's terminal uses the national cryptographic user public key parameter H for the target user. A And the public key W declared by the national cryptographic user A The system generates a user private key parameter λ for the target user. The trust institution, based on the user private key parameter λ, a first random number sk, and a third random number w, generates and returns the national cryptographic user private key component t for the target user to the user. A The user terminal uses the national cryptographic user private key component t A and temporary user private key d' A Generate the target user's national cryptographic user private key d A And according to the national cryptographic user statement public key W A Using the pre-obtained national cryptographic master public key P from a trusted institution, generate the target user's national cryptographic user public key P. A .

[0128] Then the user sends the national cryptographic user public key P to the trusted institution. A and post-quantum user public key P APQC The trusted institution's terminal uses the national cryptographic user public key P. A Post-quantum user public key P APQC The national cryptographic master public key P and the post-quantum master public key P of the trusted institutionPQC After generating and publishing the quantum user's public key W, the user declares the public key W. APQC The user declares the public key W to the national cryptographic user. A And post-quantum user-claimed public key W APQC The keys are concatenated to obtain the target user's hybrid public key W, and then the hybrid public key W is made public to the public key user.

[0129] The above are merely specific embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A method for implicit certificate public key processing based on a fusion quantum algorithm, characterized in that, An implicit certificate public key system is applied, comprising: a trust authority, a public key user, and a user terminal. The method includes: The user terminal obtains the target user's national cryptographic user declaration public key from the trust institution's institution. The user terminal generates the target user's public-private key pair based on the public key declared by the national cryptographic user. The user terminal generates the post-quantum user public-private key pair for the target user; The user terminal obtains the post-quantum user declaration public key from the trust institution's institution based on the national cryptographic user public key in the national cryptographic user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair; The user terminal concatenates the national cryptographic user declaration public key and the post-quantum user declaration public key to obtain the target user's hybrid declaration public key, and publishes the hybrid declaration public key to the public key user terminal; the hybrid declaration public key is used to perform encryption / decryption processing or signature verification processing on the target user's implicit certificate; The user terminal obtains the target user's national cryptographic user declaration public key from the trusted institution, including: The user terminal uses a preset national cryptographic algorithm to generate a temporary public-private key pair for the target user; The user terminal obtains the national cryptographic user declaration public key and the national cryptographic user private key component from the trust institution's institution based on the temporary user public key in the temporary user public-private key pair; The user terminal generates a public-private key pair for the target user based on the public key declared by the national cryptographic user, including: The user terminal generates the target user's national cryptographic user private key based on the national cryptographic user private key component and the temporary user private key in the temporary user public-private key pair; The user terminal generates the target user's national cryptographic user public key based on the national cryptographic user declaration public key and the national cryptographic master public key of the trusted institution obtained in advance.

2. The method according to claim 1, characterized in that, The user terminal generates the post-quantum user public-private key pair for the target user, including: The user terminal uses a preset post-quantum algorithm to generate the post-quantum user public-private key pair for the target user.

3. The method according to claim 1, characterized in that, The user terminal obtains the post-quantum user declaration public key from the trusted institution based on the national cryptographic user public key in the national cryptographic user public-private key pair and the post-quantum user public key in the post-quantum user public-private key pair, including: The user terminal sends the national cryptographic user public key and the post-quantum user public key to the trust institution's institution terminal; The trust institution generates and publishes the post-quantum user declaration public key to the user terminal based on the national cryptographic user public key, the post-quantum user public key, the trust institution's national cryptographic master public key, and the post-quantum master public key.

4. The method according to claim 3, characterized in that, The trust institution's terminal generates and publishes the post-quantum user declaration public key to the user terminal based on the national cryptographic user public key, the post-quantum user public key, the trust institution's national cryptographic master public key, and the post-quantum master public key, including: The trust institution generates post-quantum public key signature data based on the national cryptographic user public key, the post-quantum user public key, the national cryptographic master public key of the trust institution, and the post-quantum master public key. The trust institution concatenates the post-quantum public key signature data and the post-quantum user public key to generate and publish the post-quantum user declaration public key to the user.

5. The method according to claim 1, characterized in that, The method further includes: The public key user decrypts the hybrid declaration public key to obtain the national cryptographic user declaration public key and the post-quantum user declaration public key; The public key user terminal obtains the national cryptographic user public key and the post-quantum user public key respectively based on the national cryptographic user declaration public key and the post-quantum user declaration public key; The public key user encrypts and verifies the implicit certificate of the target user based on the national cryptographic user public key and the post-quantum user public key.

6. The method according to claim 5, characterized in that, The public key user terminal obtains the national cryptographic user public key and the post-quantum user public key based on the national cryptographic user declaration public key and the post-quantum user declaration public key, respectively, including: The public key user calculates the national cryptographic user public key based on the national cryptographic user declaration public key and the national cryptographic master public key of the trusted institution; The public key user parses the post-quantum user-declared public key to obtain the post-quantum user public key and the corresponding post-quantum public key signature data.

7. The method according to claim 6, characterized in that, The public key user parses the post-quantum user-declared public key to obtain the post-quantum user public key and the corresponding post-quantum public key signature data, including: The public key user verifies the signature data of the post-quantum public key based on the national cryptographic user public key, the post-quantum user public key, the national cryptographic master public key, and the post-quantum master public key.

8. An implicit certificate public key system, characterized in that, The implicit certificate public key system includes: an institution end of the trust authority, a public key user end, and a user end. The implicit certificate public key system is used to execute the steps of the implicit certificate public key processing method of the fused quantum algorithm as described in any one of claims 1 to 7.

9. A user terminal, characterized in that, include: The system includes a processor, a storage medium, and a bus. The storage medium stores program instructions executable by the processor. When the user terminal is running, the processor communicates with the storage medium via the bus. The processor executes the steps of the implicit certificate public key processing method of the fused quantum algorithm as described in any one of claims 1 to 7.

Images