A quantum attack-resistant national secret SSL communication system and method

Abstract

The application discloses a quantum attack-resistant national secret SSL communication system and method, and belongs to the technical field of information security. The quantum attack-resistant national secret SSL communication system comprises a traditional SSL client, a quantum attack-resistant SSL client agent and a hybrid SSL server. The traditional SSL client does not support quantum attack-resistant cryptographic algorithms, and the hybrid SSL server simultaneously has traditional cryptographic technology and quantum attack-resistant cryptographic technology. The quantum attack-resistant SSL client agent converts the message sent by the traditional SSL client into a quantum attack-resistant cryptographic algorithm and then sends the converted message to the hybrid SSL server, and converts the message sent by the hybrid SSL server into a quantum attack-resistant cryptographic algorithm and then sends the converted message to the traditional SSL client. The system quantum attack resistance is improved by means of incrementally deploying the quantum attack-resistant SSL client agent on the SSL client, and the system has a short modification cycle and low modification cost.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information security, and particularly relates to a quantum-attack-resistant national secret SSL communication system and method. BACKGROUND

[0002] With the rapid development of quantum computing technology, traditional public key cryptography systems such as RSA, Diffie-Hellman and elliptic curve cryptography are facing a huge security threat. These traditional cryptography systems are expected to become vulnerable in the face of the powerful computing power of quantum computers. The existing national secret SSL communication technology adopts the national secret SM2 algorithm based on elliptic curve cryptography technology to realize identity authentication and key exchange. However, in the face of quantum computer attacks, these algorithms will no longer have sufficient security.

[0003] Quantum-resistant cryptography is a new generation of cryptographic algorithm that can resist quantum computer attacks, including lattice-based, code-based, multivariate polynomial-based and other technologies. At present, although there have been relevant researches to add quantum-resistant algorithms to national secret SSL clients to resist quantum computer attacks, due to various reasons, the cost and risk of transforming the existing traditional national secret SSL client to resist quantum-resistant cryptography are high, and it is difficult to realize this transition quickly in a short period of time. Therefore, there is currently a lack of mature and widely used quantum-resistant cryptography scheme.

[0004] Under this background, a new technical solution is needed to effectively integrate quantum-resistant cryptography without completely replacing the existing national secret SSL client, ensuring the security and compatibility of the system, and realizing smooth transition and upgrading. SUMMARY

[0005] The technical problem to be solved by the present application is to provide a quantum-attack-resistant national secret SSL communication system and method by adding quantum-resistant cryptography to the existing national secret SSL communication system, realizing a secure communication system and method that combines traditional cryptography and quantum-resistant cryptography.

[0006] To achieve the above-mentioned purpose, in a first aspect, the present application provides a quantum-attack-resistant national secret SSL communication system, which comprises a traditional SSL client, a quantum-resistant SSL client agent and a hybrid SSL server.

[0007] The traditional SSL client is a national secret SSL client that does not support quantum-resistant cryptography.

[0008] The hybrid SSL server has both traditional national secret cryptography technology and quantum-resistant cryptography technology.

[0009] The anti-quantum SSL client agent and the traditional SSL client are deployed on the same device or different devices in the same LAN.

[0010] The traditional SSL client communicates with the hybrid SSL server through the anti-quantum SSL client agent; the anti-quantum SSL client agent transforms the message sent by the traditional SSL client by using an anti-quantum cryptographic algorithm and then sends the transformed message to the hybrid SSL server, and inversely transforms the message sent by the hybrid SSL server by using an anti-quantum cryptographic algorithm and then sends the inversely transformed message to the traditional SSL client.

[0011] The traditional SSL client, the anti-quantum SSL client agent, and the hybrid SSL server interact with each other to complete a national cryptographic SSL handshake process of hybrid traditional cryptographic technology and anti-quantum cryptographic technology.

[0012] Preferably, the anti-quantum SSL client agent supports simultaneous establishment of connections with multiple traditional SSL clients.

[0013] Preferably, the anti-quantum SSL client agent distinguishes multiple sessions established by the multiple traditional SSL clients and the hybrid SSL server according to IP addresses, port numbers, and session IDs.

[0014] In a second aspect, the present application provides an anti-quantum attack national cryptographic SSL communication method, which is implemented based on the anti-quantum attack national cryptographic SSL communication system described above, and includes the following steps:

[0015] Step S1: a traditional SSL client sends a client Hello message to an anti-quantum SSL client agent, wherein the Hello message includes a first client random number ClientRandom and a cryptographic algorithm suite list Cipher Suites.

[0016] Step S2: the anti-quantum SSL client agent appends a hybrid anti-quantum cryptographic algorithm suite to the client Hello message, and then sends the modified client Hello message to a hybrid SSL server.

[0017] Step S3, the hybrid SSL server selects a hybrid anti-quantum cryptographic algorithm suite according to a security policy configuration, constructs a server Hello message, a certificate message, and a server hybrid key exchange message, and sends them to the anti-quantum SSL client agent; the certificate includes a hybrid signature certificate and a hybrid encryption certificate, the hybrid signature certificate includes a server traditional signature algorithm public key and a server anti-quantum signature algorithm public key, and the hybrid encryption certificate includes a server traditional encryption algorithm public key and a server anti-quantum encryption algorithm public key; the server hybrid key exchange message includes a traditional key exchange parameter TKEX, a traditional key exchange parameter signature TS, an anti-quantum key exchange parameter PKEX, and an anti-quantum key exchange parameter signature PS;

[0018] Step S4, the anti-quantum SSL client agent replaces the hybrid anti-quantum cryptographic algorithm suite in the server Hello message with a traditional cryptographic algorithm suite supported by the SSL client; caches the anti-quantum key exchange parameter PKEX and a session ID locally; modifies the server hybrid key exchange message, removes the anti-quantum key exchange parameter PKEX and the anti-quantum key exchange parameter signature PS, and forms a server traditional key exchange message; and then sends the modified server Hello message, the certificate message, and the server traditional key exchange message to the traditional SSL client.

[0019] Step S5, the traditional SSL client generates a pre-master secret key PMS and a traditional client key exchange parameter CKEX according to a traditional key exchange algorithm, constructs a client key exchange message according to the traditional client key exchange parameter CKEX, and sends the client key exchange message to the anti-quantum SSL client agent; the traditional client key exchange parameter CKEX includes a second client random number used to generate the pre-master secret key PMS.

[0020] Step S6, the anti-quantum SSL client agent looks up the server anti-quantum key exchange parameter PKEX and the hybrid anti-quantum cryptographic algorithm suite corresponding to the session ID, performs anti-quantum encryption on the traditional client key exchange parameter CKEX to form a hybrid client key exchange parameter MIXCKEX, and then sends the hybrid client key exchange parameter MIXCKEX to the hybrid SSL server.

[0021] Step S7, the hybrid SSL server parses the client hybrid key exchange message MIXCKEX and decrypts to generate the pre-master secret key PMS.

[0022] Step S8, the hybrid SSL server and the traditional SSL client calculate working keys and perform ciphertext communication according to the existing national secret SSL specification respectively using the pre-master secret key PMS.

[0023] Preferably, the step S4 further includes the following steps before the step S4:

[0024] The anti-quantum SSL client agent parses the server-side hybrid key exchange message, verifies the anti-quantum key exchange parameter signature PS, and interrupts the handshake protocol if the verification fails.

[0025] Preferably, the step S5 further comprises the following steps:

[0026] The traditional SSL client parses the server-side traditional key exchange message, verifies the traditional key exchange parameter signature TS, and interrupts the handshake protocol if the verification fails.

[0027] Preferably, in the step S6, the specific method for anti-quantum encryption of the traditional client key exchange parameter CKEX to form the hybrid client key exchange parameter MIXCKEX is as follows:

[0028] If the anti-quantum cryptographic algorithm in the hybrid cryptographic algorithm suite is a public key encryption algorithm, the traditional client key exchange parameter CKEX is encrypted using the anti-quantum public key encryption algorithm to output ciphertext ECKEX, and the hybrid client key exchange parameter MIXCKEX=ECKEX is generated; if the anti-quantum cryptographic algorithm in the hybrid cryptographic algorithm suite is an anti-quantum key encapsulation algorithm, the anti-quantum key encapsulation algorithm and the anti-quantum public key are used to generate shared key plaintext SS and ciphertext ESS, the traditional client key exchange parameter CKEX is symmetrically encrypted using the plaintext SS to output ciphertext ECKEX, and the hybrid client key exchange parameter MIXCKEX=ESS|ECKEX is generated.

[0029] Preferably, in the step S7, the specific method for decryption to generate the pre-master secret PMS is as follows:

[0030] If the anti-quantum cryptographic algorithm in the hybrid cryptographic algorithm suite is a public key encryption algorithm, the traditional client key exchange parameter CKEX is decrypted using the anti-quantum private key to output ECKEX; if the anti-quantum cryptographic algorithm in the hybrid cryptographic algorithm suite is an anti-quantum key encapsulation algorithm, the shared key plaintext SS is generated by using the anti-quantum private key to de-encapsulate ESS, and the traditional client key exchange parameter CKEX is output by symmetrically decrypting ECKEX using SS; finally, the pre-master secret PMS is generated according to the traditional client key exchange parameter CKEX.

[0031] The application has the following beneficial effects: the anti-quantum attack national secret SSL communication system provided by the scheme comprises a traditional SSL client, an anti-quantum SSL client agent and a hybrid SSL server. The traditional SSL client is a national secret SSL client that does not support anti-quantum cryptographic algorithms. The hybrid SSL server has both traditional cryptographic technology and anti-quantum cryptographic technology. The traditional SSL client communicates with the hybrid SSL server through the anti-quantum SSL client agent. The anti-quantum SSL client agent converts the message sent by the traditional SSL client into an anti-quantum cryptographic algorithm before sending it to the hybrid SSL server, and converts the message sent by the hybrid SSL server into an anti-quantum cryptographic algorithm before sending it to the traditional SSL client. The traditional SSL client, the anti-quantum SSL client agent and the hybrid SSL server interact with each other to complete the national secret SSL handshake process of hybrid traditional cryptographic technology and anti-quantum cryptographic technology. The scheme improves the anti-quantum attack capability of the system by incrementally deploying an anti-quantum SSL client agent on the SSL client, has no effect on the existing SSL client or system, and has a short modification period and low modification cost. BRIEF DESCRIPTION OF DRAWINGS

[0032] The accompanying drawings, which are included to provide a further understanding of the application and constitute a part of this application, illustrate embodiments of the application and together with the description serve to explain the application. In the drawings:

[0033] Figure 1 The anti-quantum attack national secret SSL communication system block diagram provided by an embodiment of the application.

[0034] Figure 2 The anti-quantum attack national secret SSL communication system block diagram provided by another embodiment of the application.

[0035] Figure 3 The anti-quantum attack national secret SSL communication method interaction schematic diagram provided by an embodiment of the application.

[0036] Figure 4 The anti-quantum attack national secret SSL communication method interaction flowchart provided by an embodiment of the application. DETAILED DESCRIPTION

[0037] In order to make the purposes, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the protection scope of the present application.

[0038] The general idea of the present application is as follows: for the traditional SSL client that cannot be upgraded due to various reasons, an anti-quantum SSL client agent with anti-quantum cryptographic algorithm technology is incrementally deployed to indirectly realize the purpose of supporting the anti-quantum cryptographic algorithm of the SSL client. The traditional SSL client and the anti-quantum SSL client agent are combined to form a virtual SSL client supporting the anti-quantum cryptographic algorithm, which has no effect on the existing SSL client or system and has low modification cost.

[0039] The embodiments of the present application will be described in further detail below with reference to the drawings of the specification. It should be understood that the embodiments described herein are only used to illustrate and explain the present application, and are not used to limit the present application.

[0040] As shown in Figure 1 The embodiments of the present application provide an anti-quantum attack SM SSL communication system, which comprises a traditional SSL client, an anti-quantum SSL client agent and a hybrid SSL server.

[0041] The traditional SSL client is a SM SSL client that does not support anti-quantum cryptographic algorithms. The traditional SSL client comprises a browser, a mail client, a mobile application, an enterprise-level application, a security device (firewall, intrusion detection system) and the like.

[0042] The hybrid SSL server has both traditional SM cryptographic technology and anti-quantum cryptographic technology. In the embodiments of the present application, "hybrid" means that the traditional SM cryptographic technology and the anti-quantum cryptographic technology are integrated together, so that the system has anti-quantum attack capability while maintaining the security of the original SM algorithm.

[0043] The anti-quantum SSL client agent and the traditional SSL client are deployed on the same device or different devices in the same local area network. The traditional SSL client establishes a connection with the anti-quantum SSL client agent through the IP address and port number of the anti-quantum SSL client agent.

[0044] The traditional SSL client communicates with the hybrid SSL server through the anti-quantum SSL client agent; the anti-quantum SSL client agent converts the message sent by the traditional SSL client by using an anti-quantum encryption algorithm and then sends the converted message to the hybrid SSL server, and converts the message sent by the hybrid SSL server by using an anti-quantum encryption algorithm in reverse and then sends the converted message to the traditional SSL client. The anti-quantum encryption algorithm conversion refers to anti-quantum conversion of the message sent by the traditional SSL client, and converting the message sent by the traditional SSL client into a corresponding message sent by an SSL client with anti-quantum encryption technology, and the conversion includes adding an anti-quantum encryption algorithm suite, encrypting the message content by using an anti-quantum encryption algorithm, and the like. The anti-quantum encryption algorithm reverse conversion refers to anti-quantum reverse conversion of the message sent by the SSL client, and converting the message sent by the hybrid SSL server into a message that can be processed by the traditional SSL client, and the conversion includes replacing the anti-quantum encryption algorithm suite with a cipher algorithm suite supported by the traditional SSL client, and the like.

[0045] The traditional SSL client, the anti-quantum SSL client agent and the hybrid SSL server interact with each other to complete a national encryption SSL handshake process of hybrid traditional encryption technology and anti-quantum encryption technology.

[0046] In the embodiment of the application, the anti-quantum SSL client agent establishes an anti-quantum hybrid connection with the hybrid SSL server and establishes a standard SSL connection with the traditional SSL client. In the national encryption SSL handshake stage, the anti-quantum SSL client agent parses and modifies the messages from the traditional SSL client and the hybrid SSL server, removes the anti-quantum part in the message from the hybrid SSL server and then forwards the message to the traditional SSL client; and adds anti-quantum support in the message from the traditional SSL client and then forwards the message to the hybrid SSL server. In the subsequent cipher text transmission stage, the anti-quantum SSL client agent is only responsible for forwarding the message, and the encryption and decryption of the message are completed by the traditional SSL client and the hybrid SSL server. In this way, the influence on the existing national encryption SSL client is minimal, the anti-quantum SSL client agent is more lightweight, the modification cost is low and the modification period is short.

[0047] As Figure 2As shown, in some embodiments of the present application, the anti-quantum SSL client proxy supports simultaneous connection with multiple conventional SSL clients. Further, the anti-quantum SSL client proxy distinguishes multiple sessions established by the multiple conventional SSL clients and the hybrid SSL server according to IP addresses, port numbers, and session IDs, each session has its own state and parameters, and multiple sessions can exist simultaneously. In an enterprise, school, or other environment, the number of SSL clients is large, and the anti-quantum SSL client proxy needs to establish connections with multiple conventional SSL clients. In order to meet different needs, multiple anti-quantum SSL client proxies can be deployed within a local area network to jointly handle the external connections of all conventional SSL clients in the local area network. This can improve connection efficiency and ensure the security and reliability of network communication.

[0048] As shown in the figure, Figures 3-4 The present application also provides an anti-quantum attack SMIME communication method, which is applied to the anti-quantum attack SMIME communication system as described above, and the method comprises the following steps:

[0049] Step S1: The conventional SSL client sends a client Hello message to the anti-quantum SSL client proxy, and the Hello message includes a first client random number ClientRandom and a cipher algorithm suite list Cipher Suites.

[0050] In the present application, the content of the client Hello message in step S1 is exactly the same as that in the existing SSL handshake process, except that the receiver of the client Hello message is the anti-quantum SSL client proxy instead of the hybrid SSL server. In the client Hello message, in addition to the first client random number ClientRandom and the cipher algorithm suite list Cipher Suites, it also includes the SSL protocol version number supported by the conventional SSL client, the compression algorithm list, the extension field, and other contents. Among them, the cipher algorithm suite list Cipher Suites only includes conventional SMIME cipher algorithm suites.

[0051] The main field in the client Hello message structure is shown in the following example, Version indicates the SSL protocol version number supported by the traditional SSL client, Random indicates the first client random number, Cipher Suites indicates the list of cipher algorithm suites, which only includes the national secret cipher algorithm suite ECC_SM4_CBC_SM3. The overall process of ECC_SM4_CBC_SM3 is as follows: the client and the server negotiate to use the ECC_SM4_CBC_SM3 cipher suite in the handshake phase; both parties perform key exchange through the ECC algorithm to generate a shared key; the SM4 algorithm is used in the CBC mode to encrypt and decrypt the transmitted data; the SM3 algorithm is used to calculate the digest of the transmitted data to ensure the integrity and authenticity of the data. The ECC_SM4_CBC_SM3 cipher suite combines the advantages of ECC, SM4 and SM3 algorithms, and has high security and efficiency.

[0052] Version: 0x0101

[0053] Random: 45fd90072e52e0c9cc7194f04191aba18eee1ad54961d6637eaf517dfc361874

[0054] Cipher Suites: ECC_SM4_CBC_SM3

[0055] It should be noted that in the above example, the cipher algorithm suite list only contains one cipher algorithm suite, and in actual application, the cipher algorithm suite list may also contain multiple cipher algorithm suites.

[0056] In step S2, the anti-quantum SSL client agent appends a hybrid anti-quantum cipher algorithm suite to the client Hello message, and then sends the modified client Hello message to the hybrid SSL server.

[0057] In the embodiment of the present application, after receiving the client Hello message, the anti-quantum SSL client agent adds an anti-quantum cipher suite in the cipher suite list, and then sends it to the hybrid SSL server. As shown in the following example after adding the anti-quantum cipher suite to the client Hello message after step S1, the anti-quantum SSL client agent adds ECC_MLDSA65_MLKEM768_SM4_CBC_SM3 in the cipher suite list. ECC_MLDSA65_MLKEM768_SM4_CBC_SM3 is a composite cipher suite that combines multiple cryptographic technologies, including elliptic curve cryptography (ECC), multi-layer digital signature algorithm (MLDSA), multi-layer key encapsulation mechanism (MLKEM), symmetric encryption algorithm (SM4), and hash algorithm (SM3). Its workflow is as follows: ECC and MLDSA are used for key exchange and digital signature; MLKEM is used for key encapsulation; SM4_CBC mode is used for data encryption and decryption; and SM3 hash algorithm is used for data integrity check. ECC_MLDSA65_MLKEM768_SM4_CBC_SM3 combines multiple cryptographic technologies to provide multi-level security protection and resist multiple attacks, including quantum computing attacks.

[0058] Version:0x0101

[0059] Random:45fd90072e52e0c9cc7194f04191aba18eee1ad54961d6637eaf517dfc361874

[0060] Cipher Suites:ECC_SM4_CBC_SM3 ECC_MLDSA65_MLKEM768_SM4_CBC_SM3

[0061] It should be noted that in the above example, the anti-quantum SSL client agent only adds one anti-quantum cipher suite in the cipher suite list, and in actual application, multiple anti-quantum cipher suites can also be added.

[0062] Step S3, the hybrid SSL service end selects a hybrid quantum-resistant password algorithm suite according to a security policy configuration, constructs a service end Hello message, a certificate message and a service end hybrid key exchange message and sends them to the quantum-resistant SSL client agent; the certificate includes a hybrid signature certificate and a hybrid encryption certificate, the hybrid signature certificate includes a service end traditional signature algorithm public key and a service end quantum-resistant signature algorithm public key, the hybrid encryption certificate includes a service end traditional encryption algorithm public key and a service end quantum-resistant encryption algorithm public key; the service end hybrid key message includes a traditional key exchange parameter TKEX, a traditional key exchange parameter signature TS, a quantum-resistant key exchange parameter PKEX and a quantum-resistant key exchange parameter signature PS.

[0063] The content of the service end Hello message is the same as that of the national secret SSL handshake process, including a service end SSL version number, a service end random number ServerRandom, a service end selected password algorithm suite and a session ID. The service end Hello message example is as follows, Random is the service end random number, Cipher Suite is the service end selected password algorithm suite, in the following example, the service end selects the quantum-resistant password algorithm suite ECC_MLDSA65_MLKEM768_SM4_CBC_SM3 added by the quantum-resistant SSL client agent.

[0064] Version:0x0101

[0065] Random:1fa43d761820e309c01a87182ed550792bb173c09ad78e76c90ffab2d72edabd

[0066] Session ID:78849b4eb1f9d679ca3d697fb28b9a4fa33fed59d65a117445abe2b51298d360

[0067] Cipher Suite:ECC_MLDSA65_MLKEM768_SM4_CBC_SM3

[0068] The certificate message sent by the hybrid SSL server includes a hybrid signature certificate and a hybrid encryption certificate. The hybrid signature certificate includes a server traditional signature algorithm public key, a first traditional certificate signature, a server anti-quantum signature algorithm public key, and a first anti-quantum certificate signature. The hybrid encryption certificate includes a server traditional encryption algorithm public key, a second traditional certificate signature, a server anti-quantum encryption algorithm public key, and a second anti-quantum certificate signature. The server generates a server traditional signature algorithm public key and a server anti-quantum signature algorithm public key, and also generates a server traditional signature algorithm private key and a server anti-quantum signature algorithm private key corresponding to the two public keys respectively. The server generates a server traditional encryption algorithm public key and a server anti-quantum encryption algorithm public key, and also generates a server traditional encryption algorithm private key and a server anti-quantum encryption algorithm private key corresponding to the two public keys respectively. The first traditional certificate signature, the first anti-quantum certificate signature, the second traditional certificate signature, and the second anti-quantum certificate signature are used to verify the legality of the certificate.

[0069] In the server hybrid key exchange message, the traditional key exchange parameter TKEX and the anti-quantum key exchange parameter PKEX can be empty. If the anti-quantum key exchange parameter PKEX is not empty, it is a temporary anti-quantum public key generated by the hybrid SSL server. The traditional key exchange parameter signature TS = Asymmetric_Sign(ClientRandom | ServerRandom | TKEX, pri_sig_s), Asymmetric_Sign is a traditional asymmetric algorithm signature algorithm, ClientRandom is a first client random number, ServerRandom is a server random number, pri_sig_s is a server traditional signature algorithm private key, and | indicates a concatenation operation. The anti-quantum key exchange parameter signature PS = PQC_Sign(ClientRandom | ServerRandom | TKEX | PKEX, pqc_pri_sig_s), PQC_Sign is an anti-quantum signature algorithm, and pqc_pri_sig_s is a server anti-quantum signature algorithm private key. After the hybrid SSL server calculates the traditional key exchange parameter signature TS and the anti-quantum key exchange parameter signature PS, it constructs the server hybrid key exchange message MIXSKEX = TKEX | TS | PKEX | PS, and then sends the server Hello message, the certificate message, and the server hybrid key exchange message to the anti-quantum SSL client agent. An example of the server hybrid key message is as follows, where Signature indicates a traditional key exchange parameter signature, and PQC Signature indicates an anti-quantum key exchange parameter signature.

[0070] Version: 0x0101

[0071] Signature: 304502204e4a83d03bc946e06078c85cec45e8c4e160366a70282f79202f7eb2ee280437022100b1cd77d3fa7a855305a6d8cd5d7cb07012edb818d058f3aaafc9bec61da0e856

[0072] PQC Signature: cfb6799571891ba3d1496e179cc49470aa759b09e8beee4d9979c7bd812018d8......

[0073] In step S4, the anti-quantum SSL client agent replaces the hybrid anti-quantum cryptographic algorithm suite in the server Hello message with a conventional cryptographic algorithm suite supported by the SSL client, caches the anti-quantum key exchange parameter PKEX and the session ID locally, modifies the server hybrid key exchange message to remove the anti-quantum key exchange parameter PKEX and the anti-quantum key exchange parameter signature PS, forms a server conventional key exchange message, and then sends the modified server Hello message, certificate message and server conventional key exchange message to the conventional SSL client.

[0074] In the embodiment of the present application, the step S4 further comprises:

[0075] The anti-quantum SSL client agent parses the server hybrid key exchange message and verifies the anti-quantum key exchange parameter signature PS. If the verification fails, the handshake protocol is interrupted. Specifically, the anti-quantum SSL client agent verifies the anti-quantum key exchange parameter signature PS by using the server anti-quantum signature algorithm public key contained in the hybrid signature certificate sent by the server.

[0076] In the embodiment of the present application, the anti-quantum SSL client agent replaces the hybrid anti-quantum cryptographic algorithm suite in the server Hello message with a conventional cryptographic algorithm suite, for example, replaces the anti-quantum cryptographic algorithm suite Cipher Suite from ECC_MLDSA65_MLKEM768_SM4_CBC_SM3 back to ECC_SM4_CBC_SM3 supported by the SSL client. At the same time, the anti-quantum key exchange parameter PKEX and the anti-quantum signature PS in the server hybrid key exchange message are removed. The anti-quantum SSL client agent caches the anti-quantum key exchange parameter PKEX and the session ID locally, which are used to encrypt the key exchange parameter sent by the conventional SSL client in the subsequent handshake process.

[0077] The message example in step S5 corresponding to the message example in step S4 is shown as follows.

[0078] Modified server Hello message example, in which the Cipher Suite is replaced.

[0079] Version: 0x0101

[0080] Random: 1fa43d761820e309c01a87182ed550792bb173c09ad78e76c90ffab2d72edabd

[0081] Session ID: 78849b4eb1f9d679ca3d697fb28b9a4fa33fed59d65a117445abe2b51298d360

[0082] Cipher Suite: ECC_SM4_CBC_SM3

[0083] Modified server key exchange message example, in which the PQC Signature is removed.

[0084] Version: 0x0101

[0085] Signature: 304502204e4a83d03bc946e06078c85cec45e8c4e160366a70282f79202f7eb2ee280437022100b1cd77d3fa7a855305a6d8cd5d7cb07012edb818d058f3aaafc9bec61da0e856

[0086] In step S5, the conventional SSL client generates a pre-master key PMS and a conventional client key exchange parameter CKEX according to a conventional key exchange algorithm, constructs a client key exchange message according to the conventional client key exchange parameter CKEX, and sends the client key exchange message to the anti-quantum SSL client agent; the conventional client key exchange parameter CKEX includes a second client random number used to generate the pre-master key PMS.

[0087] In the embodiment of the application, the step S5 further includes:

[0088] The traditional SSL client parses the server traditional key exchange message, verifies the traditional key exchange parameter signature TS, and interrupts the handshake protocol if the verification fails. Specifically, the SSL client verifies the traditional key exchange parameter signature TS by using the server traditional signature algorithm public key included in the mixed signature certificate sent by the server.

[0089] In the embodiment of the application, the traditional SSL client generates a pre-master key PMS and a traditional client key exchange parameter CKEX according to a traditional key exchange algorithm according to the existing national secret SSL specification GMT 0024-2023. The traditional client key exchange parameter CKEX includes a second client random number ClientRandom1 generated by the SSL client for generating the pre-master key PMS, and the pre-master key PMS is calculated from a first client random number ClientRandom, a server random number ServerRandom, and the second client random number ClientRandom1. The traditional SSL client encrypts the second client random number using the server traditional encryption algorithm public key and then sends it to the anti-quantum SSL client agent.

[0090] In step S6, the anti-quantum SSL client agent looks up the server anti-quantum key exchange parameter PKEX and the mixed anti-quantum cryptographic algorithm suite corresponding to the session ID, performs anti-quantum encryption on the traditional client key exchange parameter CKEX to form a mixed client key exchange parameter MIXCKEX, and then sends the mixed client key exchange parameter MIXCKEX to the mixed SSL server.

[0091] In the embodiment of the application, after the anti-quantum SSL client agent receives the client key exchange message sent by the traditional SSL client, it performs anti-quantum encryption on the traditional client key exchange parameter CKEX before sending it to the mixed SSL server. The specific method of performing anti-quantum encryption on the traditional client key exchange parameter CKEX to form a mixed client key exchange parameter MIXCKEX is as follows:

[0092] If the quantum-resistant algorithm in the hybrid cryptographic algorithm suite is a public key encryption algorithm, then the traditional client key exchange parameter CKEX is encrypted using the quantum-resistant public key encryption algorithm, and the ciphertext ECKEX is output, and a hybrid client key exchange parameter MIXCKEX=ECKEX is generated. If the quantum-resistant algorithm in the hybrid cryptographic algorithm suite is a quantum-resistant key encapsulation algorithm, then the quantum-resistant key encapsulation algorithm and the quantum-resistant public key are used to generate a shared key plaintext SS and a ciphertext ESS, the traditional client key exchange parameter CKEX is symmetrically encrypted using the plaintext SS, the ciphertext ECKEX is output, and a hybrid client key exchange parameter MIXCKEX=ESS|ECKEX is generated. The quantum-resistant public key can be a temporary quantum-resistant public key sent by the hybrid SSL server through a server key exchange message, or a server quantum-resistant encryption algorithm public key in a server hybrid encryption certificate, depending on the type of key exchange algorithm.

[0093] In step S7, the hybrid SSL server parses the client hybrid key exchange message MIXCKEX, and decrypts to generate a pre-master key PMS.

[0094] In the embodiment of the application, in step S7, the specific method of decrypting to generate a pre-master key PMS is as follows:

[0095] If the quantum-resistant algorithm in the hybrid cryptographic algorithm suite is a public key encryption algorithm, then the quantum-resistant private key is used to decrypt ECKEX, and the traditional client key exchange parameter CKEX is output. If the quantum-resistant algorithm in the hybrid cryptographic algorithm suite is a quantum-resistant key encapsulation algorithm, then the quantum-resistant private key is used to unencapsulate ESS to generate a shared key plaintext SS, and then SS is used to symmetrically decrypt ECKEX to output the traditional client key exchange parameter CKEX. Finally, the pre-master key PMS is generated according to the traditional client key exchange parameter CKEX. Corresponding to the quantum-resistant public key, the quantum-resistant private key can be a private key corresponding to a temporary quantum-resistant public key of the hybrid SSL server, or a private key corresponding to a server quantum-resistant encryption algorithm public key in a server hybrid encryption certificate, depending on the type of key exchange algorithm.

[0096] In step S8, the hybrid SSL server and the traditional SSL client each use the pre-master key PMS to calculate a working key and perform ciphertext communication according to the existing national secret SSL specification.

[0097] The working key and the subsequent process comply with the GMT 0024-2023 specification, which will not be described here.

[0098] It should be noted that when the existing national SSL client is anti-quantum transformed, the anti-quantum SSL client agent needs to be individually transformed, and the transformation period, transformation cost and transformation risk need to be evaluated. After evaluation, the SSL client that can be upgraded quickly can directly communicate with the hybrid SSL server in the scheme of the application after upgrading. For the SSL client that cannot be upgraded temporarily or has a long upgrading period, the anti-quantum SSL client agent needs to be used to communicate with the hybrid SSL server to obtain anti-quantum ability.

[0099] The application has the following beneficial effects: the anti-quantum attack national SSL communication system provided by the scheme includes a traditional SSL client, an anti-quantum SSL client agent and a hybrid SSL server. The traditional SSL client is a national SSL client that does not support anti-quantum cryptographic algorithms, the hybrid SSL server has both traditional cryptographic technology and anti-quantum cryptographic technology, and the traditional SSL client communicates with the hybrid SSL server through the anti-quantum SSL client agent. The anti-quantum SSL client agent transforms the message sent by the traditional SSL client by anti-quantum cryptographic algorithms and then sends it to the hybrid SSL server, and inversely transforms the message sent by the hybrid SSL server by anti-quantum cryptographic algorithms and then sends it to the traditional SSL client. The traditional SSL client, the anti-quantum SSL client agent and the hybrid SSL server interact with each other to complete the national SSL handshake process of mixed traditional cryptographic technology and anti-quantum cryptographic technology. The scheme improves the anti-quantum attack ability of the system by incrementally deploying the anti-quantum SSL client agent on the SSL client, and has no effect on the existing SSL client or system, and has a short transformation period and low transformation cost.

[0100] The scheme of the application effectively integrates anti-quantum cryptographic algorithms, ensures the security and compatibility of the existing national SSL client / system, and realizes smooth transition and upgrading. This not only helps to protect existing investment, but also improves the overall security of the system to cope with future quantum computing threats.

[0101] The above is only a specific embodiment of the application, and cannot be used to limit the scope of the application. Equivalent changes made by general technical personnel in the art according to the present invention, and changes well known to those skilled in the art, should still fall within the scope of the application.

Claims

1. A quantum attack resistant national cryptographic SSL communication system, characterized in that, The system comprises a traditional SSL client, an anti-quantum SSL client agent, and a hybrid SSL server; The traditional SSL client is a national secret SSL client that does not support anti-quantum cryptographic algorithms; The hybrid SSL server has both traditional national secret cryptographic technology and anti-quantum cryptographic technology; The anti-quantum SSL client agent and the traditional SSL client are deployed on the same device or different devices in the same local area network; The traditional SSL client communicates with the hybrid SSL server through the anti-quantum SSL client agent; the anti-quantum SSL client agent converts the message sent by the traditional SSL client into an anti-quantum cryptographic algorithm before sending it to the hybrid SSL server, and converts the message sent by the hybrid SSL server into an anti-quantum cryptographic algorithm before sending it to the traditional SSL client; The traditional SSL client, the anti-quantum SSL client agent, and the hybrid SSL server interact with each other to complete the national secret SSL handshake process of hybrid traditional cryptographic technology and anti-quantum cryptographic technology.

2. The quantum attack resistant SMIME SSL communication system of claim 1, wherein, The anti-quantum SSL client agent supports establishing connections with multiple traditional SSL clients simultaneously.

3. The quantum attack resistant SMIME SSL communication system of claim 2, wherein, The anti-quantum SSL client agent distinguishes multiple sessions established between the multiple traditional SSL clients and the hybrid SSL server according to IP addresses, port numbers, and session IDs.

4. A quantum attack-resistant national secret SSL communication method, characterized in that, The method is applied to the anti-quantum attack-resistant national secret SSL communication system of any one of claims 1 to 3, and comprises the following steps: Step S1: the traditional SSL client sends a client Hello message to the anti-quantum SSL client agent, and the Hello message comprises a first client random number ClientRandom and a cryptographic algorithm suite list Cipher Suites; Step S2: the anti-quantum SSL client agent appends a hybrid anti-quantum cryptographic algorithm suite to the client Hello message, and then sends the modified client Hello message to the hybrid SSL server; Step S3: the hybrid SSL server selects a hybrid anti-quantum cryptographic algorithm suite according to a security policy configuration, constructs a server Hello message, a certificate message, and a server hybrid key exchange message, and sends them to the anti-quantum SSL client agent; the certificate comprises a hybrid signature certificate and a hybrid encryption certificate, the hybrid signature certificate comprises a server traditional signature algorithm public key and a server anti-quantum signature algorithm public key, the hybrid encryption certificate comprises a server traditional encryption algorithm public key and a server anti-quantum encryption algorithm public key; the server hybrid key exchange message comprises a traditional key exchange parameter TKEX, a traditional key exchange parameter signature TS, an anti-quantum key exchange parameter PKEX, and an anti-quantum key exchange parameter signature PS; Step S4, the anti-quantum SSL client agent replaces the hybrid anti-quantum cipher algorithm suite in the server Hello message with a conventional cipher algorithm suite supported by the SSL client; caches the anti-quantum key exchange parameter PKEX and the session ID locally; modifies the server hybrid key exchange message, removes the anti-quantum key exchange parameter PKEX and the anti-quantum key exchange parameter signature PS, forms a server conventional key exchange message; and then sends the modified server Hello message, certificate message and server conventional key exchange message to the conventional SSL client; Step S5, the conventional SSL client generates a pre-master secret PMS and a conventional client key exchange parameter CKEX according to a conventional key exchange algorithm, constructs a client key exchange message according to the conventional client key exchange parameter CKEX, and sends the client key exchange message to the anti-quantum SSL client agent; the conventional client key exchange parameter CKEX includes a second client random number used to generate the pre-master secret PMS; Step S6, the anti-quantum SSL client agent looks up the server anti-quantum key exchange parameter PKEX and the hybrid anti-quantum cipher algorithm suite corresponding to the session ID, anti-quantum encrypts the conventional client key exchange parameter CKEX to form a hybrid client key exchange parameter MIXCKEX, and then sends the hybrid client key exchange parameter MIXCKEX to the hybrid SSL server; Step S7, the hybrid SSL server parses the client hybrid key exchange message MIXCKEX and decrypts to generate the pre-master secret PMS; Step S8, the hybrid SSL server and the conventional SSL client each use the pre-master secret PMS to calculate a working key according to the existing national secret SSL specification and perform ciphertext communication.

5. The quantum attack resistant SMIME communication method of claim 4, wherein, The step S4 further includes: The anti-quantum SSL client agent parses the server hybrid key exchange message and verifies the anti-quantum key exchange parameter signature PS, and if the verification fails, the handshake protocol is interrupted.

6. The quantum attack resistant SMIME communication method of claim 4, wherein, The step S5 further includes: The conventional SSL client parses the server conventional key exchange message and verifies the conventional key exchange parameter signature TS, and if the verification fails, the handshake protocol is interrupted.

7. The quantum attack resistant SMIME communication method of claim 4, wherein, In the step S6, the specific method for anti-quantum encrypting the conventional client key exchange parameter CKEX to form the hybrid client key exchange parameter MIXCKEX is: If the anti-quantum algorithm in the hybrid cryptographic algorithm suite is a public key encryption algorithm, encrypt the traditional client key exchange parameter CKEX using the anti-quantum public key encryption algorithm, output the ciphertext ECKEX, and generate the hybrid client key exchange parameter MIXCKEX = ECKEX; if the anti-quantum algorithm in the hybrid cryptographic algorithm suite is an anti-quantum key encapsulation algorithm, use the anti-quantum key encapsulation algorithm and the anti-quantum public key to generate the shared key plaintext SS and the ciphertext ESS, symmetrically encrypt the traditional client key exchange parameter CKEX using the plaintext SS, output the ciphertext ECKEX, and generate the hybrid client key exchange parameter MIXCKEX = ESS|ECKEX.

8. The quantum attack resistant SMIME communication method of claim 7, wherein, In the step S7, the specific method for decrypting to generate the pre-master key PMS is as follows: If the anti-quantum algorithm in the hybrid cryptographic algorithm suite is a public key encryption algorithm, decrypt ECKEX using the anti-quantum private key, and output the traditional client key exchange parameter CKEX; if the anti-quantum algorithm in the hybrid cryptographic algorithm suite is an anti-quantum key encapsulation algorithm, generate the shared key plaintext SS by using the anti-quantum private key to unencapsulate ESS, and then symmetrically decrypt ECKEX using SS to output the traditional client key exchange parameter CKEX; finally, generate the pre-master key PMS according to the traditional client key exchange parameter CKEX.

Images