Certificate-based post-quantum encryption migration system, method, device and medium

Abstract

The invention discloses a certificate-based post-quantum encryption migration system, method, device and medium, a key sender uses a second public key to perform asymmetric encryption on a post-quantum public key and a first symmetric sub-key in a post-quantum public-private key pair, and uses a first private key in a first asymmetric public-private key pair to perform signature, so that the post-quantum public key and the first symmetric sub-key in the post-quantum public-private key pair are signed; the first ciphertext is sent to a secret key receiver; and the secret key receiver performs signature verification on the first ciphertext by using the first public key, and decrypts the first ciphertext by using a second private key in the second asymmetric public and private key pair after the signature verification is passed, thereby obtaining a post-quantum public key and a first symmetric sub-key. Compared with a post-quantum algorithm key migration scheme which is manually distributed, the post-quantum cryptographic key migration method improves the efficiency and security of post-quantum cryptographic key migration.

Description

Technical Field

[0001] The present application relates to the field of cryptographic security technology, and in particular to a certificate-based post-quantum encryption migration system, method, device and medium. Background Art

[0002] As a groundbreaking cutting-edge technology, quantum technology has become the frontier of a new round of scientific and technological revolution and industrial transformation, and will have an important impact on the technical systems of many industries, including the financial industry. While enabling business, quantum technology can also crack today's cryptographic security system, thus posing a potential security threat to the security of financial information systems centered on cryptography. In order to cope with the potential security threats posed by quantum computing, the core strategy is to study and standardize post-quantum cryptography that can resist attacks from quantum computing technology, and then implement post-quantum cryptography migration to replace existing cryptographic algorithms in information systems with post-quantum cryptographic algorithms in batches and in an orderly manner.

[0003] At present, in the post-quantum cryptography migration scheme used in the transition period, the post-quantum algorithm keys are distributed manually, which not only has a large workload, but also is prone to security vulnerabilities in manual operations, making the post-quantum cryptography migration inefficient and less secure. Summary of the invention

[0004] The present application provides a certificate-based post-quantum cryptographic migration system, method, device and medium to solve the problems of low efficiency and poor security of post-quantum cryptographic migration in the prior art.

[0005] In a first aspect, the present application provides a certificate-based post-quantum encryption migration system, the system comprising: a key sender and a key receiver;

[0006] The key sender is used to generate a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver is used to generate a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the second public key in the second asymmetric public-private key pair to the key sender through a certificate;

[0007] The key sender is used to generate a post-quantum public-private key pair based on a post-quantum encryption algorithm;

[0008] The key sender is used to generate a first symmetric sub-key based on a symmetric encryption algorithm;

[0009] The key sender is configured to use the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and use the first private key in the first asymmetric public-private key pair to sign, so as to obtain a first ciphertext and send it to the key receiver;

[0010] The key recipient is used to verify the signature of the first ciphertext using the first public key, and after the signature verification is passed, use the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

[0011] The above technical solution has the following advantages or beneficial effects:

[0012] In this application, the traditional asymmetric encryption algorithm, symmetric encryption algorithm and post-quantum encryption algorithm are combined to improve the security of the overall post-quantum encryption migration solution while making it more feasible. This application uses the existing certificate system for public key identity authentication. Before using the post-quantum cryptographic algorithm for encryption, the receiver encrypts and transmits the post-quantum cryptographic algorithm public key through a traditional encryption algorithm. After the sender verifies the public key identity, it uses the post-quantum public key to encrypt the transmitted content, ensuring the security of the post-quantum cryptographic public key identity authentication. Compared with the post-quantum algorithm key migration solution distributed manually, this application improves the efficiency and security of post-quantum cryptographic migration.

[0013] Furthermore, the key receiver is used to generate a second symmetric sub-key based on a symmetric encryption algorithm;

[0014] The key receiver is configured to encrypt the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; use the first symmetric subkey and the second symmetric subkey as inputs of a key derivation function to generate a symmetric key; use the symmetric key to encrypt security data to obtain a third ciphertext; and send the second ciphertext and the third ciphertext to the key sender;

[0015] The key sender is used to use the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; use the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and use the symmetric key to decrypt the third ciphertext to obtain the security data.

[0016] The above technical solution has the following advantages or beneficial effects:

[0017] In this application, the encryption algorithm used to encrypt secure data is protected by both the traditional encryption algorithm and the post-quantum encryption algorithm, and the ciphertext during the transmission process does not contain the complete key, thereby improving the security of secure data transmission.

[0018] Furthermore, the asymmetric encryption algorithm includes a domestic cryptographic algorithm SM2.

[0019] Furthermore, the symmetric encryption algorithm includes the domestic cryptographic algorithm SM4.

[0020] Furthermore, the key derivation function includes a KDF function.

[0021] In a second aspect, the present application provides a certificate-based post-quantum encryption migration method, which is applied to a key sender, and the method includes:

[0022] The key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the key sender through a certificate;

[0023] The key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm;

[0024] The key sender generates a first symmetric sub-key based on a symmetric encryption algorithm;

[0025] The key sender uses the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric sub-key in the post-quantum public-private key pair, and signs with the first private key in the first asymmetric public-private key pair to obtain a first ciphertext and send it to the key receiver; the key receiver uses the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

[0026] Furthermore, the method further comprises:

[0027] The key receiver generates a second symmetric sub-key based on a symmetric encryption algorithm;

[0028] The key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain a second ciphertext; uses the first symmetric subkey and the second symmetric subkey as inputs of a key derivation function to generate a symmetric key; uses the symmetric key to encrypt security data to obtain a third ciphertext; and sends the second ciphertext and the third ciphertext to the key sender;

[0029] The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; uses the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the security data.

[0030] In a third aspect, the present application provides a certificate-based post-quantum encryption migration method, which is applied to a key receiver, and the method includes:

[0031] The key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm;

[0032] The key sender generates a first symmetric sub-key based on a symmetric encryption algorithm;

[0033] The key sender uses the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric sub-key in the post-quantum public-private key pair, and uses the first private key in the first asymmetric public-private key pair to sign, obtains a first ciphertext and sends it to the key receiver; the key receiver uses the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

[0034] Furthermore, the method further comprises:

[0035] The key receiver generates a second symmetric sub-key based on a symmetric encryption algorithm;

[0036] The key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain a second ciphertext; uses the first symmetric subkey and the second symmetric subkey as inputs of a key derivation function to generate a symmetric key; uses the symmetric key to encrypt security data to obtain a third ciphertext; and sends the second ciphertext and the third ciphertext to the key sender;

[0037] The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; uses the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the security data.

[0038] In a fourth aspect, the present application provides a certificate-based post-quantum encryption migration device, which is applied to a key sender, and the device includes: a first sending module, a first key generating module, and a first receiving module;

[0039] The first sending module is used to generate a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the first public key in the first asymmetric public-private key pair to a key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the first receiving module through a certificate;

[0040] The first key generation module is used to generate a post-quantum public-private key pair based on a post-quantum encryption algorithm; and to generate a first symmetric sub-key based on a symmetric encryption algorithm;

[0041] The first sending module is used to use the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric sub-key in the post-quantum public-private key pair, and use the first private key in the first asymmetric public-private key pair to sign, obtain a first ciphertext and send it to the key recipient; the key recipient uses the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, use the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

[0042] Furthermore, the device further comprises: a first decryption module;

[0043] The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm; the key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain a second ciphertext; the first symmetric subkey and the second symmetric subkey are used as inputs of a key derivation function to generate a symmetric key; the security data is encrypted using the symmetric key to obtain a third ciphertext; and the second ciphertext and the third ciphertext are sent to the first receiving module;

[0044] The first decryption module is used to use the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; use the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and use the symmetric key to decrypt the third ciphertext to obtain the security data.

[0045] In a fifth aspect, the present application provides a certificate-based post-quantum encryption migration device, which is applied to a key receiver, and the device includes: a second sending module, a second decryption module, and a second receiving module;

[0046] The second sending module is used to generate a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the second public key in the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to the second receiving module through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm;

[0047] The key sender generates a first symmetric sub-key based on a symmetric encryption algorithm;

[0048] The key sender uses the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and uses the first private key in the first asymmetric public-private key pair to sign, so as to obtain a first ciphertext and send it to the second receiving module;

[0049] The second decryption module is used to use the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, use the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

[0050] Furthermore, the device further comprises: a second key generation module;

[0051] The second key generation module is used to generate a second symmetric sub-key based on a symmetric encryption algorithm;

[0052] The second sending module is used to encrypt the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; use the first symmetric subkey and the second symmetric subkey as inputs of a key derivation function to generate a symmetric key; use the symmetric key to encrypt security data to obtain a third ciphertext; and send the second ciphertext and the third ciphertext to the key sender;

[0053] The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; uses the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the security data.

[0054] In a sixth aspect, the present application provides an electronic device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other via the communication bus;

[0055] Memory, used to store computer programs;

[0056] The processor is used to implement the method when executing the program stored in the memory.

[0057] In a seventh aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and the computer program implements the described method when executed by a processor.

[0058] In an eighth aspect, the present application provides a computer program product, wherein the computer program product comprises an executable program, and the executable program is executed by a processor to implement the described method. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0060] Figure 1 Schematic diagram of the first certificate-based post-quantum encryption migration system provided for this application;

[0061] Figure 2 Schematic diagram of the second certificate-based post-quantum encryption migration system provided for this application;

[0062] Figure 3 Schematic diagram of the first certificate-based post-quantum encryption migration process provided for this application;

[0063] Figure 4 Schematic diagram of the second certificate-based post-quantum encryption migration process provided for this application;

[0064] Figure 5 Schematic diagram of the third certificate-based post-quantum encryption migration process provided for this application;

[0065] Figure 6 Schematic diagram of the fourth certificate-based post-quantum encryption migration process provided for this application;

[0066] Figure 7 A schematic diagram of the structure of the first certificate-based post-quantum encryption migration device provided in this application;

[0067] Figure 8 A schematic diagram of the structure of the second certificate-based post-quantum encryption migration device provided in this application;

[0068] Fig. 9 Certificate-based post-quantum encryption migration flow chart provided for this application;

[0069] Fig.10 This is a schematic diagram of the electronic device structure provided in this application. DETAILED DESCRIPTION

[0070] In order to make the purpose and implementation method of the present application clearer, the exemplary implementation method of the present application will be clearly and completely described below in conjunction with the drawings in the exemplary embodiments of the present application. Obviously, the described exemplary embodiments are only part of the embodiments of the present application, rather than all the embodiments.

[0071] It should be noted that the brief description of terms in this application is only for the convenience of understanding the embodiments described below, and is not intended to limit the embodiments of this application. Unless otherwise specified, these terms should be understood according to their common and usual meanings.

[0072] The terms "first", "second", "third", etc. in the specification and claims of this application and the above drawings are used to distinguish similar or similar objects or entities, and do not necessarily mean to limit a specific order or sequence, unless otherwise noted. It should be understood that the terms used in this way can be interchangeable under appropriate circumstances.

[0073] The terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover but not exclude inclusion, for example, a product or device comprising a list of components is not necessarily limited to all the components expressly listed but may include other components not expressly listed or inherent to such product or device.

[0074] The term "module" refers to any known or later developed hardware, software, firmware, artificial intelligence, fuzzy logic or combination of hardware and / or software code that is capable of performing the functions associated with that element.

[0075] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present application.

[0076] For the convenience of explanation, the above description has been made in conjunction with specific embodiments. However, the above exemplary discussion is not intended to be exhaustive or limit the embodiments to the specific forms disclosed above. Based on the above teachings, various modifications and variations can be obtained. The selection and description of the above embodiments are to better explain the principles and practical applications, so that those skilled in the art can better use the embodiments and various different variations of the embodiments suitable for specific use considerations.

[0077] Referring to the transformation of the national secret system, there is a long gap between the transformation of the cryptographic algorithm and the promotion of the certificate system, and there are still cases where the software and hardware are incompatible with the certificates. On the other hand, the two currently recognized transitional cryptographic migration schemes must involve the post-quantum cryptographic certificate system, and there is currently no information on the relevant work of the post-quantum cryptographic certificate system at home and abroad. Therefore, for the current post-quantum cryptographic migration work, a set of solutions is urgently needed to ensure the security of the post-quantum cryptographic public key identity authentication while ensuring the security of the symmetric key. This application proposes a post-quantum cryptographic migration transition plan based on the current certificate system.

[0078] On the one hand, this application can ensure the security of the public key of the post-quantum cryptographic algorithm. On the other hand, this application can deal with the threat of quantum computing that stores first and then cracks. On the other hand, the encryption algorithm used in this application to encrypt secure data is jointly protected by a traditional cryptographic algorithm (symmetric or asymmetric encryption algorithm) and a post-quantum cryptographic algorithm, and it still has a protective effect even if one side is hacked.

[0079] This application proposes a post-quantum encryption scheme for digital envelopes, which combines traditional encryption algorithms with post-quantum encryption algorithms, improving the security of the overall scheme while making it more feasible. The scheme uses the existing certificate system for public key identity authentication. Before using the post-quantum cryptographic algorithm for encryption, the receiver encrypts and transmits the post-quantum cryptographic algorithm public key through a traditional encryption algorithm. After the sender verifies the public key identity, it uses the post-quantum public key to encrypt the transmitted content, ensuring the security of the post-quantum cryptographic public key identity authentication. At the same time, the SM4 algorithm that is ultimately used to encrypt secure data is jointly protected by traditional encryption algorithms and post-quantum encryption algorithms, and the ciphertext during the transmission process does not contain the complete key, which improves the security of the scheme.

[0080] Figure 1 A schematic diagram of a first certificate-based post-quantum encryption migration system provided for this application includes a key sender 11 and a key receiver 12;

[0081] The key sender 11 is used to generate a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the first public key in the first asymmetric public-private key pair to the key receiver 12 through a certificate; the key receiver 12 is used to generate a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the second public key in the second asymmetric public-private key pair to the key sender 11 through a certificate;

[0082] The key sender 11 is used to generate a post-quantum public-private key pair based on a post-quantum encryption algorithm;

[0083] The key sender 11 is used to generate a first symmetric sub-key based on a symmetric encryption algorithm;

[0084] The key sender 11 is used to use the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and use the first private key in the first asymmetric public-private key pair to sign, and obtain a first ciphertext to send to the key receiver 12;

[0085] The key receiver 12 is used to use the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, use the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

[0086] The key sender and the key receiver are electronic devices, such as cryptographic devices, servers, smart terminals, etc.

[0087] In the present application, the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, the first asymmetric public-private key pair includes a first public key and a first private key, and sends the first public key to the key receiver through a certificate. The key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, the second asymmetric public-private key pair includes a second public key and a second private key, and sends the second public key to the key sender through a certificate.

[0088] The key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm; the post-quantum public-private key pair includes a post-quantum public key and a post-quantum private key. The key sender generates a first symmetric subkey based on a symmetric encryption algorithm.

[0089] The key sender uses the second public key sent by the password receiver to asymmetrically encrypt the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and uses the first private key in the first asymmetric public-private key pair to sign the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair to obtain the first ciphertext; then the first ciphertext is sent to the key receiver; the key receiver uses the first public key sent by the password sender to verify the signature of the first ciphertext, and after the signature verification is passed, the second private key in the second asymmetric public-private key pair is used to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric subkey. If the signature verification fails, the post-quantum public key and the first symmetric subkey cannot be obtained.

[0090] In this application, the traditional asymmetric encryption algorithm, symmetric encryption algorithm and post-quantum encryption algorithm are combined to improve the security of the overall post-quantum encryption migration solution while making it more feasible. This application uses the existing certificate system for public key identity authentication. Before using the post-quantum cryptographic algorithm for encryption, the receiver encrypts and transmits the post-quantum cryptographic algorithm public key through a traditional encryption algorithm. After the sender verifies the public key identity, it uses the post-quantum public key to encrypt the transmitted content, ensuring the security of the post-quantum cryptographic public key identity authentication. Compared with the post-quantum algorithm key migration solution distributed manually, this application improves the efficiency and security of post-quantum cryptographic migration.

[0091] Figure 2 A schematic diagram of a second certificate-based post-quantum encryption migration system provided in the present application, wherein the key receiver 12 is used to generate a second symmetric sub-key based on a symmetric encryption algorithm;

[0092] The key receiver 12 is configured to use the post-quantum public key to encrypt the second symmetric subkey to obtain a second ciphertext; use the first symmetric subkey and the second symmetric subkey as inputs of a key derivation function to generate a symmetric key; use the symmetric key to encrypt security data to obtain a third ciphertext; and send the second ciphertext and the third ciphertext to the key sender 11;

[0093] The key sender 11 is used to use the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; use the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and use the symmetric key to decrypt the third ciphertext to obtain the security data.

[0094] The key receiver generates a second symmetric sub-key based on a symmetric encryption algorithm; the key receiver uses the post-quantum public key sent by the key sender to encrypt the second symmetric sub-key to obtain a second ciphertext; the first symmetric sub-key and the second symmetric sub-key sent by the key sender are used as inputs of a key derivation function to generate a symmetric key; the symmetric key is used to encrypt security data to obtain a third ciphertext; the second ciphertext and the third ciphertext are sent to the key sender; the key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain a second symmetric sub-key; the first symmetric sub-key and the obtained second symmetric sub-key are used as inputs of a key derivation function to generate a symmetric key; the symmetric key is used to decrypt the third ciphertext to obtain security data.

[0095] In this application, the encryption algorithm used to encrypt secure data is protected by both the traditional encryption algorithm and the post-quantum encryption algorithm, and the ciphertext during the transmission process does not contain the complete key, thereby improving the security of secure data transmission.

[0096] In the present application, the asymmetric encryption algorithm includes the domestic encryption algorithm SM2, the symmetric encryption algorithm includes the domestic encryption algorithm SM4, and the key derivation function includes the KDF function.

[0097] Figure 3 The first certificate-based post-quantum encryption migration process provided for this application includes the following steps:

[0098] S101: A key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to a key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the key sender through a certificate;

[0099] S102: The key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm; the key sender generates a first symmetric sub-key based on a symmetric encryption algorithm;

[0100] S103: The key sender uses the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric sub-key in the post-quantum public-private key pair, and signs the key with the first private key in the first asymmetric public-private key pair to obtain a first ciphertext and send it to the key receiver; the key receiver uses the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

[0101] The first certificate-based post-quantum encryption migration method provided in this application is applied to the key sender in a certificate-based post-quantum encryption migration system.

[0102] Figure 4 The second certificate-based post-quantum encryption migration process provided for this application includes the following steps:

[0103] S201: The key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the key sender through a certificate;

[0104] S202: The key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm; the key sender generates a first symmetric subkey based on a symmetric encryption algorithm;

[0105] S203: The key sender uses the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and signs the key with the first private key in the first asymmetric public-private key pair to obtain a first ciphertext and send it to the key receiver; the key receiver uses the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric subkey;

[0106] S204: The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm; the key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain a second ciphertext; the first symmetric subkey and the second symmetric subkey are used as inputs of a key derivation function to generate a symmetric key; the security data is encrypted using the symmetric key to obtain a third ciphertext; the second ciphertext and the third ciphertext are sent to the key sender;

[0107] S205: The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; uses the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the security data.

[0108] Figure 5 The third certificate-based post-quantum encryption migration process provided for this application includes the following steps:

[0109] S301: The key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm;

[0110] S302: The key sender generates a first symmetric sub-key based on a symmetric encryption algorithm; the key sender uses the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric sub-key in the post-quantum public-private key pair, and signs the first ciphertext using the first private key in the first asymmetric public-private key pair to obtain a first ciphertext and send it to the key receiver; the key receiver uses the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

[0111] The third certificate-based post-quantum encryption migration method provided in this application is applied to the key recipient in a certificate-based post-quantum encryption migration system.

[0112] Figure 6 The fourth certificate-based post-quantum encryption migration process provided for this application includes the following steps:

[0113] S401: The key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm;

[0114] S402: The key sender generates a first symmetric sub-key based on a symmetric encryption algorithm; the key sender uses the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric sub-key in the post-quantum public-private key pair, and signs the first private key in the first asymmetric public-private key pair to obtain a first ciphertext and send it to the key receiver; the key receiver uses the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key;

[0115] S403: The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm; the key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain a second ciphertext; uses the first symmetric subkey and the second symmetric subkey as inputs of a key derivation function to generate a symmetric key; uses the symmetric key to encrypt security data to obtain a third ciphertext; and sends the second ciphertext and the third ciphertext to the key sender;

[0116] S404: The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; uses the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the security data.

[0117] Figure 7 A schematic diagram of the structure of a first certificate-based post-quantum encryption migration device provided in this application, which is applied to a key sender, and the device includes: a first sending module 21, a first key generating module 22 and a first receiving module 23;

[0118] The first sending module 21 is used to generate a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the first public key in the first asymmetric public-private key pair to a key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the first receiving module 23 through a certificate;

[0119] The first key generation module 22 is used to generate a post-quantum public-private key pair based on a post-quantum encryption algorithm; and to generate a first symmetric sub-key based on a symmetric encryption algorithm;

[0120] The first sending module 21 is used to use the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric sub-key in the post-quantum public-private key pair, and use the first private key in the first asymmetric public-private key pair to sign, so as to obtain a first ciphertext and send it to the key recipient; the key recipient uses the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

[0121] The device further comprises: a first decryption module 24;

[0122] The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm; the key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain a second ciphertext; the first symmetric subkey and the second symmetric subkey are used as inputs of a key derivation function to generate a symmetric key; the security data is encrypted using the symmetric key to obtain a third ciphertext; the second ciphertext and the third ciphertext are sent to the first receiving module 23;

[0123] The first decryption module 24 is used to use the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; use the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and use the symmetric key to decrypt the third ciphertext to obtain the security data.

[0124] Figure 8 A schematic diagram of the structure of a second certificate-based post-quantum encryption migration device provided in this application, which is applied to a key receiver, wherein the device comprises: a second sending module 31, a second decryption module 32, and a second receiving module 33;

[0125] The second sending module 31 is used to generate a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the second public key in the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to the second receiving module 33 through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm;

[0126] The key sender generates a first symmetric sub-key based on a symmetric encryption algorithm;

[0127] The key sender uses the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and uses the first private key in the first asymmetric public-private key pair to sign, to obtain a first ciphertext and send it to the second receiving module 33;

[0128] The second decryption module 32 is used to use the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, use the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

[0129] Furthermore, the device further comprises: a second key generating module 34;

[0130] The second key generation module 34 is used to generate a second symmetric sub-key based on a symmetric encryption algorithm;

[0131] The second sending module is used to encrypt the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; use the first symmetric subkey and the second symmetric subkey as inputs of a key derivation function to generate a symmetric key; use the symmetric key to encrypt security data to obtain a third ciphertext; and send the second ciphertext and the third ciphertext to the key sender;

[0132] The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; uses the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the security data.

[0133] Fig. 9 The certificate-based post-quantum encryption migration flow chart provided for this application includes three stages: key generation, post-quantum public key transmission, and secure data transmission (or sensitive data transmission). Taking the digital envelope mode as the scenario, the algorithm is explained as follows using the national secret algorithm as an example.

[0134] The key generation phase process is as follows:

[0135] The key sender Alice generates a first asymmetric public-private key pair based on the asymmetric encryption algorithm SM2. The first asymmetric public-private key pair includes a first public key (SM2 public key A ) and the first private key (SM2 private key A ) and pass the SM2 public key to the certificate A Sent to the key recipient.

[0136] The key receiver Bob generates a second asymmetric public-private key pair based on the asymmetric encryption algorithm SM2. The second asymmetric public-private key pair includes a second public key (SM2 public key B ) and the second private key (SM2 private key B ) and pass the SM2 private key to the certificate B Sent to the key sender.

[0137] The key sender Alice generates a post-quantum public-private key pair based on the post-quantum encryption algorithm; the post-quantum public-private key pair includes the post-quantum private key A and post-quantum public keys A .

[0138] The key sender Alice generates a first symmetric subkey (key A) based on a symmetric encryption algorithm.

[0139] The key receiver Bob generates a second symmetric subkey (key B) based on a symmetric encryption algorithm.

[0140] The post-quantum public key transmission process is as follows:

[0141] Alice, the key sender, uses Bob, the key receiver, to send the second public key (SM2 public key) B ), for the post-quantum public key in the post-quantum public-private key pair Aand the first symmetric subkey (key A) for asymmetric SM2 encryption, and uses the first private key (SM2 private key) in the first asymmetric public-private key pair A ) is signed to obtain the first ciphertext and send it to the key receiver Bob;

[0142] The key receiver Bob uses the key sender Alice's first public key (SM2 public key A ) to verify the signature of the first ciphertext. After the signature is verified, the second private key (SM2 private key) in the second asymmetric public-private key pair is used B ) Decrypt the first ciphertext and obtain the post-quantum public key A and the first symmetric subkey (Key A).

[0143] The sensitive data transmission process is as follows:

[0144] The key receiver Bob uses the decrypted post-quantum public key A The second symmetric subkey (key B) is encrypted to obtain the second ciphertext; the key derivation function (KDF function) that meets the requirements of GB / T 32918.4 and agreed upon in advance with the key sender Alice is used, and the first symmetric subkey (key A) and the second symmetric subkey (key B) are used as inputs of the key derivation function to generate a symmetric key (SM4 key); the desensitized data is encrypted using the symmetric key (SM4 key) to obtain the third ciphertext; the second ciphertext and the third ciphertext are sent to the key sender Alice;

[0145] Alice, the key sender, uses the post-quantum private key in the post-quantum public-private key pair A The second ciphertext is decrypted to obtain the second symmetric subkey (key B); the key sender Alice uses the key derivation function (KDF function) that meets the requirements of GB / T32918.4 agreed in advance with the key receiver Bob, and uses the first symmetric subkey (key A) and the second symmetric subkey (key B) as inputs of the key derivation function to generate a symmetric key (SM4 key); the third ciphertext is decrypted using the symmetric key (SM4 key) to obtain the plaintext sensitive data.

[0146] The present application also provides an electronic device, such as Fig.10 As shown, it includes: a processor 41, a communication interface 42, a memory 43 and a communication bus 44, wherein the processor 41, the communication interface 42, and the memory 43 communicate with each other through the communication bus 44;

[0147] The memory 43 stores a computer program, and when the program is executed by the processor 41, the processor 41 executes any one of the above method steps.

[0148] The communication bus mentioned in the above electronic device can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0149] The communication interface 42 is used for communication between the above electronic device and other devices.

[0150] The memory may include a random access memory (RAM) or a non-volatile memory (NVM), such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

[0151] The above-mentioned processor can be a general-purpose processor, including a central processing unit, a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, etc.

[0152] The present application also provides a computer storage readable storage medium, wherein the computer readable storage medium stores a computer program executable by an electronic device, and when the program runs on the electronic device, the electronic device implements any of the above method steps when executing.

[0153] The present application provides a computer program product, wherein the computer program product comprises an executable program, and when the executable program is executed by a processor, the method described above is implemented.

[0154] Although the preferred embodiments of the present application have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.

[0155] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A certificate-based post-quantum encryption migration system, characterized in that: The system comprises: a key sender and a key receiver; The key sender is used to generate a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver is used to generate a second asymmetric public-private key pair based on the asymmetric encryption algorithm, and send the second public key in the second asymmetric public-private key pair to the key sender through a certificate; The key sender is used to generate a post-quantum public-private key pair based on a post-quantum encryption algorithm; The key sender is used to generate a first symmetric sub-key based on a symmetric encryption algorithm; The key sender is configured to use the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and use the first private key in the first asymmetric public-private key pair to sign, so as to obtain a first ciphertext and send it to the key receiver; The key recipient is used to verify the signature of the first ciphertext using the first public key, and after the signature verification is passed, use the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

2. The system according to claim 1, characterized in that The key receiver is used to generate a second symmetric sub-key based on the symmetric encryption algorithm; The key receiver is configured to encrypt the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; and use the first symmetric subkey and the second symmetric subkey as inputs of a key derivation function to generate a symmetric key; Encrypt the security data using the symmetric key to obtain a third ciphertext; send the second ciphertext and the third ciphertext to the key sender; The key sender is used to decrypt the second ciphertext using the post-quantum private key in the post-quantum public-private key pair to obtain the second symmetric sub-key; and use the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; The third ciphertext is decrypted using the symmetric key to obtain the security data.

3. The system according to claim 1, characterized in that The asymmetric encryption algorithm includes the domestic cryptographic algorithm SM2.

4. The system according to claim 1 or 2, characterized in that: The symmetric encryption algorithm includes the domestic cryptographic algorithm SM4.

5. The system according to claim 2, characterized in that The key derivation function includes a KDF function.

6. A certificate-based post-quantum encryption migration method, characterized in that: Applied to the key sender, the method comprises: The key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the key sender through a certificate; The key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm; The key sender generates a first symmetric sub-key based on a symmetric encryption algorithm; The key sender uses the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric sub-key in the post-quantum public-private key pair, and signs with the first private key in the first asymmetric public-private key pair to obtain a first ciphertext and send it to the key receiver; the key receiver uses the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

7. The method according to claim 6, characterized in that The method further comprises: The key receiver generates a second symmetric sub-key based on a symmetric encryption algorithm; The key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain a second ciphertext; uses the first symmetric subkey and the second symmetric subkey as inputs of a key derivation function to generate a symmetric key; uses the symmetric key to encrypt security data to obtain a third ciphertext; and sends the second ciphertext and the third ciphertext to the key sender; The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; uses the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the security data.

8. A certificate-based post-quantum encryption migration method, characterized in that: Applied to a key receiver, the method comprises: The key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm; The key sender generates a first symmetric sub-key based on a symmetric encryption algorithm; The key sender uses the second public key to asymmetrically encrypt the post-quantum public key and the first symmetric sub-key in the post-quantum public-private key pair, and uses the first private key in the first asymmetric public-private key pair to sign, obtains a first ciphertext and sends it to the key receiver; the key receiver uses the first public key to verify the signature of the first ciphertext, and after the signature verification is passed, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric sub-key.

9. The method according to claim 8, characterized in that The method further comprises: The key receiver generates a second symmetric sub-key based on a symmetric encryption algorithm; The key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain a second ciphertext; uses the first symmetric subkey and the second symmetric subkey as inputs of a key derivation function to generate a symmetric key; uses the symmetric key to encrypt security data to obtain a third ciphertext; and sends the second ciphertext and the third ciphertext to the key sender; The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric sub-key; uses the first symmetric sub-key and the second symmetric sub-key as inputs of the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the security data.

10. An electronic device, characterized in that: It includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other through the communication bus; Memory, used to store computer programs; The processor is used to implement the method described in claim 6 or 7, or implement the method described in claim 8 or 9 when executing the program stored in the memory.

11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method of claim 6 or 7 is implemented, or the method of claim 8 or 9 is implemented.

12. A computer program product, characterized in that The computer program product comprises an executable program, which is executed by a processor to implement the method of claim 6 or 7, or the method of claim 8 or 9.

Images