A post-quantum key negotiation system and method based on IKE protocol

Abstract

The present invention discloses a post-quantum key negotiation system and method based on the IKE protocol, which relates to the field of network security, especially the design and implementation of key exchange and identity authentication protocols. The present invention provides security for data protection and identity authentication by combining the IKE protocol scheme with the post-quantum cryptographic algorithm; by introducing post-quantum cryptographic algorithms such as ML‑KEM, ML‑DSA and FALCON, the quantum resistance of key exchange and identity authentication is enhanced, and the flexibility and adaptability of the protocol are also improved; in addition, the dynamic algorithm selection mechanism adopted by the present invention enables users to optimize security performance according to specific needs, thereby improving the overall efficiency of the system while ensuring information security.

Description

Technical Field

[0001] The present invention relates to the field of network security, and in particular to a post-quantum key negotiation system and method based on the IKE protocol. Background Art

[0002] Internet Protocol Security (IPsec) is a framework designed to protect Internet Protocol communications, and its core component is the Internet Key Exchange (IKE) protocol. The main function of the IKE protocol is to securely negotiate keys and establish secure communication channels in an insecure network environment. Through a series of authentication and key exchange mechanisms, the IKE protocol ensures the confidentiality, integrity, and authenticity of data transmission, thereby providing users with a safe and reliable communication environment. Specifically, the workflow of the IKE protocol includes verifying the identities of both communicating parties, generating and exchanging encryption keys, and establishing encrypted tunnels to protect the security of data during transmission. This mechanism enables users to safely exchange sensitive information in an open network environment, and is widely used in virtual private networks (VPNs) and other secure communication scenarios.

[0003] However, with the rapid development of quantum computing technology, traditional IKE protocols face unprecedented security challenges. Existing IKE protocols usually rely on public key cryptography systems, such as RSA or elliptic curve cryptography (ECC), and their security is based on the difficulty of classical computing. However, the introduction of Shor's algorithm reveals the powerful capabilities of quantum computers, which can solve large integer decomposition and discrete logarithm problems in polynomial time, directly threatening the security of these key exchange mechanisms based on traditional algorithms. In a quantum computing environment, attackers can use the advantages of quantum computing to quickly crack RSA and ECC encryption, thereby obtaining keys and stealing sensitive information. This vulnerability makes the existing IKE protocol extremely unreliable in the future network security environment, and it is urgent to introduce post-quantum cryptographic algorithms to ensure that it can still provide strong security in the era of quantum computing. The technical problems to be solved are as follows:

[0004] 1. Insufficient quantum security: The existing IKE protocol relies on traditional public key cryptographic algorithms, such as RSA and elliptic curve cryptography (ECC), the security of which is based on the complexity of classical computing. However, with the rapid development of quantum computing technology, these algorithms face unprecedented security challenges. Specifically, the introduction of Shor's algorithm enables quantum computers to effectively solve large integer decomposition and discrete logarithm problems in polynomial time, directly threatening encryption mechanisms that rely on these mathematical problems. This vulnerability may not only lead to the leakage of keys, but also seriously damage the confidentiality and integrity of data transmission. Therefore, the security of the existing IKE protocol in a quantum computing environment is particularly insufficient, and it is urgent to adopt post-quantum cryptographic algorithms to ensure sufficient anti-attack capabilities in the future network security environment.

[0005] 2. Lack of flexibility in algorithm selection: The current IKE protocol is relatively fixed in algorithm selection, and usually presets a set of algorithms to meet general security requirements. This fixed selection mechanism limits the adaptability of the protocol in different application scenarios, and cannot dynamically adjust the encryption algorithm used according to specific security requirements and environments. For example, in an environment with high security requirements, a more powerful post-quantum cryptographic algorithm may be required, while in the case of limited resources, an algorithm with higher computational efficiency may be preferred. The lack of a flexible algorithm selection mechanism limits the applicability of the protocol and cannot meet diverse network security requirements. Therefore, designing a flexible algorithm selection mechanism that can dynamically adjust the algorithm used according to specific scenarios will greatly improve the adaptability and practicality of the IKE protocol.

[0006] 3. Insufficient compatibility and scalability: The existing IKE protocol shows obvious lack of compatibility and scalability when facing emerging technologies and algorithms. With the continuous evolution of network security threats and the continuous emergence of new cryptographic algorithms, the architecture of the existing protocol is difficult to flexibly respond to these changes. For example, many emerging post-quantum cryptographic algorithms have not yet been incorporated into the design framework of the existing IKE protocol, which makes the protocol appear stretched when facing future security needs. In addition, the lack of good modular design often requires large-scale modifications to the entire protocol when introducing new algorithms, which increases the complexity of implementation and potential security risks. Therefore, improving the compatibility and scalability of the protocol and building a modular architecture that enables it to quickly integrate new algorithms will be the key to ensuring the long-term effectiveness of the protocol and responding to future challenges. Summary of the invention

[0007] The purpose of the present invention is to provide a post-quantum key negotiation system and method based on the IKE protocol in view of the deficiencies in the prior art.

[0008] To achieve the above object, the present invention provides a post-quantum key negotiation system based on the IKE protocol, comprising:

[0009] The core protocol module is used to implement the key exchange and identity authentication functions of the IKE protocol;

[0010] Algorithm adapter module, which is used to provide key exchange adapter interface and identity authentication adapter interface, adapt different encryption algorithms to the core protocol module, integrate post-quantum cryptographic algorithms, and support dynamic loading and unloading of algorithms;

[0011] Configuration management module, used to define key exchange algorithm, identity authentication algorithm and related parameters through configuration files;

[0012] The algorithm library module is used to store different key exchange algorithms and identity authentication algorithms.

[0013] Furthermore, the key exchange adapter interface sets the initial configuration required for the key exchange algorithm through a key exchange initialization function; executes the core logic of the key exchange, i.e., key pair generation and shared key generation algorithm, through the key exchange function; obtains the shared key generated by the key exchange algorithm through the shared key function, i.e., the final output of the key exchange algorithm, for subsequent encrypted communications; sets additional parameters related to the key exchange through a key exchange additional parameter function to meet the needs of dynamic adjustment; resets the internal state of the key exchange algorithm through a key exchange reset function, and calls this function when re-keying is required to clear the current state and intermediate results so that the algorithm can be reinitialized and run.

[0014] Furthermore, the authentication adapter interface configures the initial state of the authentication algorithm through the authentication initialization function; executes the core logic of identity authentication, namely key pair generation and signature verification, through the authentication function; provides the result of identity authentication through the authentication result function; sets additional parameters related to identity authentication through the authentication additional parameter function to achieve dynamic adjustment of the behavior of the authentication algorithm; resets the internal state of the authentication algorithm through the authentication reset function, and calls this function when re-authentication is required to clear the current authentication state and intermediate results.

[0015] Furthermore, the configuration management module defines support and related parameters of key exchange algorithms, identity authentication algorithms, encryption suites and post-quantum cryptographic algorithms through JSON or YAML files.

[0016] Furthermore, the key exchange algorithms stored in the algorithm library module include key exchange algorithms ECDHE, DH and post-quantum cryptography algorithms ML-KEM, and identity authentication algorithms include ECDSA, RSA, PSK and post-quantum cryptography algorithms FALCON and ML-DSA.

[0017] Furthermore, when the core protocol module performs key exchange, it includes:

[0018] User A uses the key pair generation algorithm of the post-quantum cryptography algorithm ML-KEM to generate a pair of public key pk and private key sk. The private key sk is saved by itself, and the public key pk is transmitted to user B.

[0019] User B receives the public key pk, introduces the random number m, and uses the ML-KEM key encapsulation algorithm to generate the first shared key and the encrypted content ciphertext;

[0020] User A receives the encrypted content ciphertext, combines it with his own private key sk, and uses the key decapsulation algorithm of ML-KEM to generate the second shared key;

[0021] The first shared key and the second shared key are the same; user A and user B represent two different entities in communication.

[0022] Furthermore, the core protocol module performs identity authentication through the post-quantum cryptographic algorithm ML-DSA or FALCON, including:

[0023] Key generation and public key exchange: User A generates a key pair of public key pk1 and private key sk1, and sends public key pk1 to user B; User B generates a key pair of public key pk2 and private key sk2, and sends public key pk2 to user A;

[0024] User A identity authentication: User A generates a random number nonce1, signs the random number nonce1 with the private key sk1, and obtains the signature sig1; User A sends the random number nonce1 and the signature sig1 to User B;

[0025] User B identity verification: User B receives the random number nonce1 and signature sig1, and verifies the signature sig1 using the public key pk1. If the verification is successful, the identity of User A is confirmed;

[0026] User B identity authentication: User B generates a random number nonce2, signs the random number nonce2 with the private key sk2, and obtains the signature sig2; User B sends the random number nonce2 and the signature sig2 to User A;

[0027] User A identity verification: User A receives the random number nonce2 and signature sig2, and verifies the signature sig2 using the public key pk2. If the verification succeeds, the identity of user B is confirmed;

[0028] Through the above process, user A and user B obtain two-way identity authentication; wherein user A and user B represent two different entities in communication.

[0029] To achieve the above object, the present invention also provides a post-quantum key negotiation method based on the IKE protocol, including a key exchange process and an identity authentication process;

[0030] Key exchange process: User A uses the key pair generation algorithm of the post-quantum cryptography algorithm ML-KEM to generate a pair of public key pk and private key sk. The private key sk is saved by itself, and the public key pk is transmitted to user B. User B receives the public key pk, introduces a random number m, and uses the key encapsulation algorithm of ML-KEM to generate the first shared key and the encrypted content ciphertext. User A receives the encrypted content ciphertext, combines its own private key sk, and uses the key decapsulation algorithm of ML-KEM to generate the second shared key.

[0031] Identity authentication process: User A generates a key pair of public key pk1 and private key sk1, and user A sends public key pk1 to user B; user B generates a key pair of public key pk2 and private key sk2, and user B sends public key pk2 to user A; user A generates a random number nonce1, and signs the random number nonce1 with private key sk1 to obtain signature sig1; user A sends the random number nonce1 and signature sig1 to user B; user B receives the random number nonce1 and signature sig1, and verifies the signature sig1 with public key pk1. If the verification is successful, the identity of user A is confirmed; user B generates a random number nonce2, and signs the random number nonce2 with private key sk2 to obtain signature sig2; user B sends the random number nonce2 and signature sig2 to user A; user A receives the random number nonce2 and signature sig2, and verifies the signature sig2 with public key pk2. If the verification is successful, the identity of user B is confirmed.

[0032] Furthermore, the first shared key is the same as the second shared key; and the user A and the user B represent two different entities in communication.

[0033] Furthermore, the identity authentication process is implemented using the post-quantum cryptographic algorithm ML-DSA or FALCON.

[0034] Compared with the prior art, the present invention has the following beneficial effects:

[0035] 1. Post-quantum security improvement: This invention adopts the post-quantum cryptographic algorithm, which can effectively resist the security threats that may be brought by future quantum computers and ensure the security of key exchange and identity authentication. Compared with traditional algorithms, the post-quantum cryptographic algorithm takes into account the characteristics of quantum computing in its design and provides a more solid security guarantee. This improvement not only enhances the confidentiality of data transmission, but also provides users and organizations with higher security confidence when facing future technological challenges.

[0036] 2. Improved flexibility in algorithm selection: This solution is designed with flexibility in algorithm selection in mind, introducing algorithm adapters and configuration management modules, allowing different post-quantum cryptographic algorithms to be selected and integrated according to specific needs. By supporting the integration of multiple post-quantum cryptographic algorithms, the system can be customized according to different application scenarios and security requirements, improving overall adaptability. This flexibility not only enables the system to better meet the needs of specific industries or organizations, but also provides the possibility of access to new algorithms that may appear in the future, thereby enhancing the long-term practicality of the solution.

[0037] 3. Improved compatibility and scalability: Through modular design, the system can be seamlessly integrated with existing security infrastructure and protocols, reducing the complexity of deployment and maintenance. In addition, the scalability of the system enables it to evolve with the development of technology and changes in security requirements, supporting the addition of new algorithms and the expansion of functions. This compatibility and scalability not only improves the flexibility of the system, but also provides broad space for future security technology innovation, helping to maintain long-term security and effectiveness. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative labor.

[0039] Figure 1 It is the overall framework diagram of the system of the present invention;

[0040] Figure 2 is a flow chart of the key exchange process in the present invention;

[0041] Figure 3 It is a flow chart of the identity authentication process in the present invention. DETAILED DESCRIPTION

[0042] The present invention is described in detail below in conjunction with the accompanying drawings. In the absence of conflict, the features of the following embodiments and implementations can be combined with each other.

[0043] This solution aims to effectively resist the security threats brought by quantum computing and ensure the security of key exchange and authentication processes by introducing post-quantum cryptographic algorithms. The design principle of post-quantum cryptographic algorithms is based on an in-depth analysis of the potential attack capabilities of quantum computers. It uses mathematical problems (such as lattice problems, hash functions, etc.) as a security foundation and can provide stronger anti-attack capabilities in quantum computing environments. Therefore, this solution not only enhances the security of the existing IKE protocol, but also provides a more solid guarantee for future network communications.

[0044] To further improve the adaptability and flexibility of the protocol, this solution designs a dynamic algorithm selection mechanism that allows the encryption algorithm used to be flexibly adjusted according to specific application scenarios and security requirements. This mechanism enables the protocol to be optimized under different security levels and performance requirements to adapt to various network environments and business needs. For example, in scenarios with high security requirements, algorithms with stronger resistance to quantum attacks can be given priority, while in scenarios with high performance requirements, algorithms with higher computational efficiency can be selected. Through this flexible design, the protocol can maximize performance while ensuring security.

[0045] In addition, this solution adopts a modular architecture design, which enables the post-quantum cryptographic algorithm to be seamlessly integrated with the existing IKE protocol and supports the introduction of new algorithms in the future. This modular design not only simplifies the algorithm replacement and upgrade process, but also ensures the long-term practicality and scalability of the protocol, and can adapt to the ever-changing network security needs. With the continuous emergence of new cryptographic algorithms, this solution can integrate these algorithms in a timely manner to meet emerging security challenges, thereby providing users with continuous security protection and flexible solutions. This forward-looking design concept ensures that the protocol can still maintain efficient and secure operation in the face of the complexity and diversity of future network environments.

[0046] The present invention proposes a post-quantum key negotiation system based on the IKE protocol. The overall framework diagram of the system is as follows Figure 1 shown.

[0047] This framework diagram includes four modules: core protocol module, algorithm adapter module, configuration management module and algorithm library module.

[0048] The core protocol module implements the basic functions of the IKE protocol, including key exchange and identity authentication, and processes the main logic of the protocol to ensure secure data transmission.

[0049] The algorithm adapter module is responsible for adapting different key exchange algorithms and identity authentication algorithms to the core protocol module, providing a unified interface and supporting multiple algorithms, including Diffie-Hellman (DH) key exchange algorithm, ECDH (Elliptic Curve Diffie-Hellman) key exchange algorithm, and post-quantum ML-KEM key exchange algorithm (the latest standard post-quantum cryptographic algorithms released by the US NIST include ML-KEM, ML-DSA, FALCON, and SLH-DSA). It also includes pre-shared key PSK, digital signature RSA / ECDSA, post-quantum digital signature algorithm ML-DSA, and digital signature algorithm FALCON (due to the limited performance of the post-quantum digital signature algorithm SLH-DSA, it is not suitable for high-performance scenarios), ensuring the flexibility of the system, supporting the integration of post-quantum cryptographic algorithms, allowing dynamic loading and unloading of algorithms, and being able to quickly replace and upgrade algorithms.

[0050] The unified interface of key exchange can define a set of specifications and provide an abstract base class. Through this key exchange adapter interface, various key exchange algorithms can be uniformly managed and called. A key exchange initialization function (initialize function) is used to initialize the necessary parameters of the key exchange algorithm, that is, the type of key exchange algorithm, the selection of curves or groups, the key length, the key pair generation parameters, etc. This function is usually called before the key exchange starts to set the initial configuration required by the algorithm and return a Boolean value to indicate whether the initialization is successful. If false is returned, it means that the initialization failed; the key exchange function (exchange function) is used to execute the core logic of the key exchange, that is, key pair generation, shared key generation algorithm, etc., and returns a Boolean value to indicate whether the key exchange is successful. If false is returned, it means that the exchange process failed; the shared key function (get_shared_key function) obtains the shared key generated by the key exchange algorithm, which is the final output of the key exchange algorithm and is used for subsequent encrypted communication. It returns a byte array. If the key has not been generated or the exchange fails, an exception is thrown; the key exchange additional parameter function (set_parameters function) sets additional parameters related to the key exchange, for example, setting a specific security level or custom configuration to make the algorithm flexible at runtime and adapt to the needs of dynamic adjustment; the key exchange reset function (reset function) resets the internal state of the key exchange algorithm. This function is called when the key exchange needs to be re-performed to clear the current state and intermediate results so that the algorithm can be reinitialized and run.

[0051] The unified interface of identity authentication can also define a set of specifications and provide an abstract base class. Through this identity authentication adapter interface, unified management and calling of multiple identity authentication algorithms can be achieved. The identity authentication initialization function (initialize function) is used to initialize the necessary parameters of the identity authentication algorithm, namely the identity authentication algorithm, key length, certificate or identity information, etc. It is called before the identity authentication process begins to configure the initial state of the algorithm and return a Boolean value to indicate whether the initialization is successful. True indicates that the initialization is successful, and false indicates that the initialization fails. The identity authentication function (authenticate function) executes the core logic of identity authentication, namely key pair generation, signature verification, etc. It is used to verify the given identity information and return a Boolean value to indicate whether the identity authentication is successful. True indicates that the identity authentication is successful, and false indicates that the identity authentication fails. Specific error information is thrown. The authentication result function (get_authentication_result function) provides the result of the authentication and returns a Boolean value to indicate whether the authentication is successful. The authentication additional parameter function (set_parameteres function) sets additional parameters related to the authentication, such as setting security policies or switching algorithm modes, allowing dynamic adjustment of the behavior of the authentication algorithm to increase flexibility. The authentication reset function (reset function) resets the internal state of the authentication algorithm. This function is called when re-authentication is required to clear the current authentication state and intermediate results.

[0052] The configuration management module allows users to define supported algorithms and parameters through configuration files (such as JSON or YAML), providing flexible configuration options so that users can adjust security policies according to their needs.

[0053] Configured through JSON or YAML files, key exchange (key_exchange) defines the algorithm and related parameters used for key exchange, for example, set the algorithm (algorithm) to ECDHE, parameters (params): elliptic curve type (curve) to P-256. Authentication (authentication) defines the algorithm and related parameters for authentication, for example, the method (method) specifies the authentication method RSA algorithm, and the parameters (params) contain parameters related to the authentication algorithm: the key length (key_size) is 2048. Cipher suites (cipher_suites) define the list of cipher suites used in encrypted communication, for example, TLS_AES_128_GCM_SHA256 and TLS_CHACHA20_POLY1305_SHA256. Post-quantum cryptographic algorithm support (post_quantum_support) indicates whether the system supports post-quantum cryptographic algorithms. It is a Boolean value, true if post-quantum cryptographic support is enabled, otherwise false. Post-quantum cryptographic algorithms (quantum_algorithms), which include key exchange (key_exchange) algorithms, such as ML-KEM, and signature algorithms, such as FALCON or ML-DSA.

[0054] The default key exchange algorithm is set to ECDHE (can be replaced by DH key exchange) and the corresponding parameters, the authentication algorithm is set to RSA (can be replaced by ECDSA, PSK) and the corresponding parameters, and the encryption suite is set to AES and CHACHA20 by default; if post-quantum support is in effect, that is, post_quantum_support: true, the key exchange algorithm and authentication algorithm of the post-quantum cryptographic algorithm are used, key_exchange is ML-KEM, and signature can be FALCON or ML-DSA.

[0055] The algorithm library module stores different key exchange algorithms and identity authentication algorithms. The key exchange algorithms include the traditional algorithms ECDHE key exchange algorithm and DH key exchange algorithm and the post-quantum cryptography algorithm ML-KEM. The identity authentication algorithms include the traditional algorithms ECDSA, RSA, PSK and the post-quantum cryptography algorithms FALCON and ML-DSA. Algorithms can be added or updated without affecting the protocol.

[0056] Through the above modular design, the seamless integration of post-quantum cryptographic algorithms and IKE protocols is ensured, so as to effectively respond to the ever-changing network security needs. This design not only improves the flexibility and scalability of the system, but also provides a solid foundation for the evolution of future technologies. The combination of the core protocol module and the post-quantum cryptographic algorithm enables the system to maintain its security and reliability in the face of potential quantum computing threats. In addition, the introduction of the algorithm adapter module and the configuration management module makes the algorithm selection more flexible, and users can dynamically adjust and replace encryption algorithms according to specific application scenarios and real-time security requirements. This flexible algorithm selection mechanism ensures that the system can quickly adapt to emerging security challenges while maintaining efficient performance and strong anti-attack capabilities. Overall, this modular architecture provides users with lasting security guarantees and flexible solutions, fully reflects the foresight and practicality of modern cryptographic design, and can effectively support the continuous innovation and development in the field of network security in the future.

[0057] In the core protocol module, the key exchange and identity authentication functions can be implemented by replacing traditional cryptography with post-quantum cryptography algorithms.

[0058] See also Figure 2 , where the key exchange process uses the post-quantum ML-KEM algorithm to negotiate the shared key. User A and User B below represent two different entities in communication, usually a client and a server, or a device between two sites.

[0059] On the user A side, the key pair generation algorithm of the post-quantum cryptography algorithm ML-KEM is used to generate a pair of public key pk and private key sk. The private key sk is saved by itself, and the public key pk is transmitted to user B.

[0060] User B receives the public key pk, introduces the random number m, and uses the ML-KEM key encapsulation algorithm to generate the shared key ss and the encrypted content ciphertext;

[0061] User A receives the encrypted content ciphertext, combines it with his own private key sk, and uses the key decapsulation algorithm of ML-KEM to generate a shared key ss.

[0062] Since ML-KEM is based on the difficulty of learning with errors on a lattice, as long as the key generation and exchange process is not tampered with, the shared keys generated by both parties must be the same, and subsequent encrypted communications can be carried out.

[0063] See also Figure 3 , where the identity authentication process can use the post-quantum cryptographic algorithm ML-DSA or FALCON, as follows:

[0064] Key generation and public key exchange: User A generates a key pair of public key pk1 and private key sk1, and sends pk1 to user B; User B generates a key pair of public key pk2 and private key sk2, and sends pk2 to user A;

[0065] User A identity authentication: User A generates a random number nonce1, signs the random number nonce1 with the private key sk1, and obtains sig1; User A sends nonce1 and sig1 to User B;

[0066] User B identity verification: User B receives nonce1 and sig1, and uses pk1 to verify the signature of sig1. If the verification is successful, the identity of user A is confirmed;

[0067] User B identity authentication: User B generates a random number nonce2, signs the random number nonce2 with the private key sk2, and obtains sig2; User B sends nonce2 and sig2 to User A;

[0068] User A identity verification: User A receives nonce2 and sig2, and uses pk2 to verify the sig2 signature. If the verification is successful, the identity of user B is confirmed.

[0069] Through the above process, user A and user B obtain two-way identity authentication.

[0070] The present invention provides a post-quantum key negotiation method based on the IKE protocol, including a key exchange process and an identity authentication process; wherein user A and user B respectively represent two different entities in communication, and the identity authentication process is implemented using the post-quantum cryptographic algorithm ML-DSA or FALCON.

[0071] Key exchange process: User A uses the key pair generation algorithm of the post-quantum cryptography algorithm ML-KEM to generate a pair of public key pk and private key sk. The private key sk is saved by itself, and the public key pk is transmitted to user B. User B receives the public key pk, introduces a random number m, and uses the key encapsulation algorithm of ML-KEM to generate a shared key ss and the encrypted content ciphertext. User A receives the encrypted content ciphertext, combines its own private key sk, and uses the key decapsulation algorithm of ML-KEM to generate a shared key ss.

[0072] Identity authentication process: User A generates a key pair of public key pk1 and private key sk1, and user A sends public key pk1 to user B; user B generates a key pair of public key pk2 and private key sk2, and user B sends public key pk2 to user A; user A generates a random number nonce1, and signs the random number nonce1 with private key sk1 to obtain signature sig1; user A sends the random number nonce1 and signature sig1 to user B; user B receives the random number nonce1 and signature sig1, and verifies the signature sig1 with public key pk1. If the verification is successful, the identity of user A is confirmed; user B generates a random number nonce2, and signs the random number nonce2 with private key sk2 to obtain signature sig2; user B sends the random number nonce2 and signature sig2 to user A; user A receives the random number nonce2 and signature sig2, and verifies the signature sig2 with public key pk2. If the verification is successful, the identity of user B is confirmed.

[0073] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

[0074] The above embodiments are only used to illustrate the design ideas and features of the present invention, and their purpose is to enable those skilled in the art to understand the content of the present invention and implement it accordingly. The protection scope of the present invention is not limited to the above embodiments. Therefore, any equivalent changes or modifications made based on the principles and design ideas disclosed by the present invention are within the protection scope of the present invention.

Claims

1. A post-quantum key negotiation system based on the IKE protocol, characterized in that: include: The core protocol module is used to implement the key exchange and identity authentication functions of the IKE protocol; Algorithm adapter module, which is used to provide key exchange adapter interface and identity authentication adapter interface, adapt different encryption algorithms to the core protocol module, integrate post-quantum cryptographic algorithms, and support dynamic loading and unloading of algorithms; The configuration management module is used to define the key exchange algorithm, identity authentication algorithm and related parameters through the configuration file, providing flexible configuration options and being able to adjust the security policy according to the needs; the support of the post-quantum cryptographic algorithm, that is, post_quantum_support, indicates whether the system supports the post-quantum cryptographic algorithm. It is a Boolean value. If the post-quantum cryptographic support is enabled, it is true, otherwise it is false; if the post-quantum support is in effect, that is, post_quantum_support:true, the key exchange algorithm and identity authentication algorithm of the post-quantum cryptographic algorithm are adopted; The algorithm library module is used to store different key exchange algorithms and identity authentication algorithms.

2. The post-quantum key agreement system based on the IKE protocol as claimed in claim 1, characterized in that: The key exchange adapter interface sets the initial configuration required for the key exchange algorithm through the key exchange initialization function; executes the core logic of the key exchange, i.e., key pair generation and shared key generation algorithm, through the key exchange function; obtains the shared key generated by the key exchange algorithm through the shared key function, i.e., the final output of the key exchange algorithm, for subsequent encrypted communication; sets additional parameters related to the key exchange through the key exchange additional parameter function to meet the needs of dynamic adjustment; resets the internal state of the key exchange algorithm through the key exchange reset function, and calls this function when it is necessary to re-perform the key exchange to clear the current state and intermediate results so that the algorithm can be reinitialized and run.

3. The post-quantum key agreement system based on the IKE protocol as claimed in claim 1, characterized in that: The authentication adapter interface configures the initial state of the authentication algorithm through the authentication initialization function; executes the core logic of identity authentication, namely key pair generation and signature verification, through the authentication function; provides the result of identity authentication through the authentication result function; sets additional parameters related to identity authentication through the authentication additional parameter function to achieve dynamic adjustment of the behavior of the authentication algorithm; resets the internal state of the authentication algorithm through the authentication reset function, and calls this function when re-authentication is required to clear the current authentication state and intermediate results.

4. The post-quantum key agreement system based on the IKE protocol as claimed in claim 1, characterized in that: The configuration management module defines the support and related parameters of key exchange algorithms, identity authentication algorithms, encryption suites and post-quantum cryptographic algorithms through JSON or YAML files.

5. The post-quantum key agreement system based on the IKE protocol as claimed in claim 1, characterized in that: The key exchange algorithms stored in the algorithm library module include key exchange algorithms ECDHE, DH and post-quantum cryptography algorithms ML-KEM, and identity authentication algorithms include ECDSA, RSA, PSK and post-quantum cryptography algorithms FALCON and ML-DSA.

6. The post-quantum key agreement system based on the IKE protocol as claimed in claim 1, characterized in that: When the core protocol module performs key exchange, it includes: User A uses the key pair generation algorithm of the post-quantum cryptography algorithm ML-KEM to generate a pair of public key pk and private key sk. The private key sk is saved by itself, and the public key pk is transmitted to user B. User B receives the public key pk, introduces the random number m, and uses the ML-KEM key encapsulation algorithm to generate the first shared key and the encrypted content ciphertext; User A receives the encrypted content ciphertext, combines it with his own private key sk, and uses the key decapsulation algorithm of ML-KEM to generate the second shared key; The first shared key and the second shared key are the same; user A and user B represent two different entities in communication.

7. The post-quantum key agreement system based on the IKE protocol as claimed in claim 1, characterized in that: The core protocol module performs identity authentication through the post-quantum cryptographic algorithm ML-DSA or FALCON, including: Key generation and public key exchange: User A generates a key pair of public key pk1 and private key sk1, and sends public key pk1 to user B; User B generates a key pair of public key pk2 and private key sk2, and sends public key pk2 to user A; User A identity authentication: User A generates a random number nonce1, signs the random number nonce1 with the private key sk1, and obtains the signature sig1; User A sends the random number nonce1 and the signature sig1 to User B; User B identity verification: User B receives the random number nonce1 and signature sig1, and verifies the signature sig1 using the public key pk1. If the verification is successful, the identity of User A is confirmed; User B identity authentication: User B generates a random number nonce2, signs the random number nonce2 with the private key sk2, and obtains the signature sig2; User B sends the random number nonce2 and the signature sig2 to User A; User A identity verification: User A receives the random number nonce2 and signature sig2, and verifies the signature sig2 using the public key pk2. If the verification succeeds, the identity of user B is confirmed; Through the above process, user A and user B obtain two-way identity authentication; wherein user A and user B represent two different entities in communication.

Images