A certificate-based post-quantum cryptographic migration system, method, device, and medium

Abstract

This application discloses a certificate-based post-quantum cryptographic migration system, method, device, and medium. The key sender uses a second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and then signs it using the first private key from the first asymmetric public-private key pair, obtaining a first ciphertext which is sent to the key receiver. The key receiver uses the first public key to verify the signature on the first ciphertext. After successful verification, the receiver uses the second private key from the second asymmetric public-private key pair to decrypt the first ciphertext, obtaining the post-quantum public key and the first symmetric subkey. Compared to post-quantum algorithm key migration schemes that rely on manual distribution, this method improves the efficiency and security of post-quantum cryptographic migration.

Description

Technical Field

[0001] This application relates to the field of cryptographic security technology, and in particular to a certificate-based post-quantum cryptographic migration system, method, device, and medium. Background Technology

[0002] Quantum technology, as a groundbreaking technology, has become a leading field in the new round of technological revolution and industrial transformation, and will have a significant impact on the technological systems of many industries, including the financial industry. While enabling business operations, quantum technology can also break current cryptographic security systems, thus posing a potential security threat to the security of cryptographic-based financial information systems. To address the potential security threats posed by quantum computing, the core strategy is to research and standardize post-quantum cryptography that can withstand quantum computing attacks, and then implement post-quantum cryptographic migration, replacing existing cryptographic algorithms in information systems with post-quantum cryptographic algorithms in batches and in an orderly manner.

[0003] Currently, post-quantum cryptographic migration schemes used for the transition period rely on manual distribution of post-quantum algorithm keys. This process is not only labor-intensive but also prone to security vulnerabilities. Consequently, post-quantum cryptographic migration is inefficient and lacks security. Summary of the Invention

[0004] This application provides a certificate-based post-quantum cryptographic migration system, method, device, and medium to address the problems of low efficiency and poor security in existing post-quantum cryptographic migration technologies.

[0005] In a first aspect, this application provides a certificate-based post-quantum cryptographic migration system, the system comprising: a key sender and a key receiver;

[0006] The key sender is configured to generate a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the first public key of the first asymmetric public-private key pair to the key receiver via a certificate; the key receiver is configured to generate a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the second public key of the second asymmetric public-private key pair to the key sender via a certificate.

[0007] The key sender is used to generate a post-quantum public-private key pair based on the post-quantum encryption algorithm;

[0008] The key sender is used to generate a first symmetric subkey based on a symmetric encryption algorithm;

[0009] The key sender is used to use the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and to sign it with the first private key in the first asymmetric public-private key pair to obtain the first ciphertext and send it to the key receiver.

[0010] The key receiver is used to verify the signature of the first ciphertext using the first public key. After the signature is verified, the receiver uses the second private key from the second asymmetric public-private key pair to decrypt the first ciphertext and obtain the post-quantum public key and the first symmetric subkey.

[0011] The above technical solution has the following advantages or beneficial effects:

[0012] This application combines traditional asymmetric encryption algorithms, symmetric encryption algorithms, and post-quantum encryption algorithms, improving both the security and feasibility of the overall post-quantum encryption migration scheme. This application utilizes the existing certificate system for public key authentication. Before encryption using the post-quantum cryptography algorithm, the recipient transmits the post-quantum cryptography public key using a traditional encryption algorithm. After verifying the public key identity, the sender uses the post-quantum public key to encrypt the transmitted content, ensuring the security of the post-quantum cryptography public key authentication. Compared to post-quantum key migration schemes that rely on manual distribution, this application improves the efficiency and security of post-quantum cryptography migration.

[0013] Furthermore, the key receiver is used to generate a second symmetric subkey based on a symmetric encryption algorithm;

[0014] The key receiver is configured to encrypt the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; use the first symmetric subkey and the second symmetric subkey as inputs to a key derivation function to generate a symmetric key; use the symmetric key to encrypt secure data to obtain a third ciphertext; and send the second ciphertext and the third ciphertext to the key sender.

[0015] The key sender is configured to decrypt the second ciphertext using the post-quantum private key in the post-quantum public-private key pair to obtain the second symmetric subkey; use the first symmetric subkey and the second symmetric subkey as inputs to the key derivation function to generate the symmetric key; and use the symmetric key to decrypt the third ciphertext to obtain the secure data.

[0016] The above technical solution has the following advantages or beneficial effects:

[0017] In this application, the encryption algorithm used to encrypt secure data is protected by both traditional encryption algorithms and post-quantum encryption algorithms, and the ciphertext during transmission does not contain the complete key, thereby improving the security of secure data transmission.

[0018] Furthermore, the asymmetric encryption algorithm includes the domestically developed cryptographic algorithm SM2.

[0019] Furthermore, the symmetric encryption algorithm includes the domestically developed cryptographic algorithm SM4.

[0020] Furthermore, the key derivation function includes the KDF function.

[0021] Secondly, this application provides a certificate-based post-quantum cryptographic migration method applied to the key sender, the method comprising:

[0022] The key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key of the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key of the second asymmetric public-private key pair to the key sender through a certificate.

[0023] The key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm;

[0024] The key sender generates a first symmetric subkey based on a symmetric encryption algorithm;

[0025] The key sender uses the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and signs it using the first private key in the first asymmetric public-private key pair to obtain the first ciphertext, which is then sent to the key receiver. The key receiver uses the first public key to verify the signature of the first ciphertext. After successful verification, the receiver uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext, obtaining the post-quantum public key and the first symmetric subkey.

[0026] Furthermore, the method also includes:

[0027] The key recipient generates a second symmetric subkey based on a symmetric encryption algorithm;

[0028] The key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain the second ciphertext; the first and second symmetric subkeys are used as inputs to a key derivation function to generate a symmetric key; the symmetric key is used to encrypt secure data to obtain the third ciphertext; the second and third ciphertexts are then sent to the key sender.

[0029] The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric subkey; uses the first symmetric subkey and the second symmetric subkey as inputs to the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the secure data.

[0030] Thirdly, this application provides a certificate-based post-quantum cryptographic migration method applied to a key receiver, the method comprising:

[0031] The key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key of the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key of the first asymmetric public-private key pair to the key receiver through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm.

[0032] The first symmetric subkey is generated by the key sender based on a symmetric encryption algorithm;

[0033] The key sender uses the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and signs it using the first private key in the first asymmetric public-private key pair to obtain the first ciphertext, which is then sent to the key receiver. The key receiver uses the first public key to verify the signature of the first ciphertext. After successful verification, the receiver uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext, obtaining the post-quantum public key and the first symmetric subkey.

[0034] Furthermore, the method also includes:

[0035] The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm;

[0036] The key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain the second ciphertext; uses the first symmetric subkey and the second symmetric subkey as inputs to the key derivation function to generate a symmetric key; uses the symmetric key to encrypt secure data to obtain the third ciphertext; and sends the second ciphertext and the third ciphertext to the key sender.

[0037] The key sender decrypts the second ciphertext using the post-quantum private key in the post-quantum public-private key pair to obtain the second symmetric subkey; the first symmetric subkey and the second symmetric subkey are used as inputs to the key derivation function to generate the symmetric key; the symmetric key is used to decrypt the third ciphertext to obtain the secure data.

[0038] Fourthly, this application provides a certificate-based post-quantum cryptographic migration device for use by a key sender. The device includes: a first sending module, a first key generation module, and a first receiving module.

[0039] The first sending module is used to generate a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the first receiving module through a certificate.

[0040] The first key generation module is used to generate a post-quantum public-private key pair based on a post-quantum encryption algorithm; and to generate a first symmetric subkey based on a symmetric encryption algorithm.

[0041] The first sending module is configured to use the second public key to perform asymmetric encryption on the post-quantum public key pair and the first symmetric subkey in the post-quantum public-private key pair, and to sign it using the first private key in the first asymmetric public-private key pair to obtain a first ciphertext, which is then sent to the key receiver. The key receiver uses the first public key to verify the signature of the first ciphertext, and after successful verification, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric subkey.

[0042] Furthermore, the device also includes: a first decryption module;

[0043] The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm; the key receiver encrypts the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; the first and second symmetric subkeys are used as inputs to a key derivation function to generate a symmetric key; the symmetric key is used to encrypt secure data to obtain a third ciphertext; the second and third ciphertexts are sent to the first receiving module.

[0044] The first decryption module is used to decrypt the second ciphertext using the post-quantum private key in the post-quantum public-private key pair to obtain the second symmetric subkey; to generate the symmetric key by using the first symmetric subkey and the second symmetric subkey as inputs to the key derivation function; and to decrypt the third ciphertext using the symmetric key to obtain the secure data.

[0045] Fifthly, this application provides a certificate-based post-quantum cryptographic migration device for use by a key receiver, the device comprising: a second sending module, a second decryption module, and a second receiving module;

[0046] The second sending module is used to generate a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the second public key of the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key of the first asymmetric public-private key pair to the second receiving module through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm.

[0047] The first symmetric subkey is generated by the key sender based on a symmetric encryption algorithm;

[0048] The key sender uses the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and signs it with the first private key in the first asymmetric public-private key pair to obtain the first ciphertext, which is then sent to the second receiving module.

[0049] The second decryption module is used to verify the signature of the first ciphertext using the first public key. After the signature verification is successful, the first ciphertext is decrypted using the second private key in the second asymmetric public-private key pair to obtain the post-quantum public key and the first symmetric subkey.

[0050] Furthermore, the device also includes: a second key generation module;

[0051] The second key generation module is used to generate a second symmetric subkey based on a symmetric encryption algorithm;

[0052] The second sending module is configured to encrypt the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; generate a symmetric key by using the first and second symmetric subkeys as inputs to a key derivation function; encrypt secure data using the symmetric key to obtain a third ciphertext; and send the second ciphertext and the third ciphertext to the key sender.

[0053] The key sender decrypts the second ciphertext using the post-quantum private key in the post-quantum public-private key pair to obtain the second symmetric subkey; the first symmetric subkey and the second symmetric subkey are used as inputs to the key derivation function to generate the symmetric key; the symmetric key is used to decrypt the third ciphertext to obtain the secure data.

[0054] Sixthly, this application provides an electronic device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus;

[0055] Memory, used to store computer programs;

[0056] A processor, used to execute a program stored in memory, implements the method described.

[0057] In a seventh aspect, this application provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the method described herein.

[0058] Eighthly, this application provides a computer program product comprising an executable program that is executed by a processor to implement the method described. Attached Figure Description

[0059] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0060] Figure 1 A schematic diagram of the first certificate-based post-quantum cryptographic migration system provided for this application;

[0061] Figure 2 A schematic diagram of a second certificate-based post-quantum cryptographic migration system provided for this application;

[0062] Figure 3 A schematic diagram of the first certificate-based post-quantum cryptographic migration process provided for this application;

[0063] Figure 4 A schematic diagram of a second certificate-based post-quantum cryptographic migration process provided for this application;

[0064] Figure 5 A schematic diagram of a third certificate-based post-quantum cryptographic migration process provided for this application;

[0065] Figure 6 A schematic diagram of the fourth certificate-based post-quantum cryptographic migration process provided for this application;

[0066] Figure 7 A schematic diagram of the first certificate-based post-quantum cryptographic migration device provided for this application;

[0067] Figure 8 A schematic diagram of the structure of the second certificate-based post-quantum cryptographic migration device provided in this application;

[0068] Figure 9 The certificate-based post-quantum cryptography migration flowchart provided for this application;

[0069] Figure 10 A schematic diagram of the electronic device structure provided in this application. Detailed Implementation

[0070] To make the objectives and implementation methods of this application clearer, the exemplary implementation methods of this application will be clearly and completely described below with reference to the accompanying drawings of the exemplary embodiments of this application. Obviously, the exemplary embodiments described are only some embodiments of this application, and not all embodiments.

[0071] It should be noted that the brief descriptions of terms in this application are only for the convenience of understanding the embodiments described below, and are not intended to limit the embodiments of this application. Unless otherwise stated, these terms should be understood in their ordinary and common meaning.

[0072] The terms "first," "second," "third," etc., used in the specification, claims, and accompanying drawings of this application are used to distinguish similar or related objects or entities, and do not necessarily imply a specific order or sequence, unless otherwise specified. It should be understood that such terms are interchangeable where appropriate.

[0073] The terms “comprising” and “having”, and any variations thereof, are intended to cover but not exclude inclusion, for example, a product or device that includes a range of components is not necessarily limited to all of the components that are clearly listed, but may include other components that are not clearly listed or that are inherent to such product or device.

[0074] The term "module" refers to any known or subsequently developed hardware, software, firmware, artificial intelligence, fuzzy logic, or combination of hardware and / or software code that is capable of performing the functions associated with that element.

[0075] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features therein. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of this application.

[0076] For ease of explanation, the above description has been provided in conjunction with specific embodiments. However, the above exemplary discussion is not intended to be exhaustive or to limit the embodiments to the specific forms disclosed above. Various modifications and variations can be obtained based on the above teachings. The selection and description of the above embodiments are for the purpose of better explaining the principles and practical applications, thereby enabling those skilled in the art to better utilize the described embodiments and various different variations of embodiments suitable for specific use considerations.

[0077] Referring to the national cryptographic standard's transformation, there has been a significant time gap between the modification of cryptographic algorithms and the widespread adoption of the certificate system. Furthermore, incompatibility between software and hardware and certificates still exists. On the other hand, both currently accepted transitional cryptographic migration schemes require the participation of a post-quantum cryptographic certificate system, but there is currently no information on any related work on post-quantum cryptographic certificate systems, either domestically or internationally. Therefore, there is an urgent need for a scheme to ensure the security of post-quantum cryptographic public key authentication while maintaining the security of symmetric keys. This application proposes a post-quantum cryptographic migration transition scheme based on the current certificate system.

[0078] Firstly, this application ensures the security of the public key for post-quantum cryptography algorithms. Secondly, this application addresses the threat of quantum computing where data is stored first and then cracked. Thirdly, the encryption algorithm used in this application for encrypting secure data is jointly protected by traditional cryptographic algorithms (symmetric or asymmetric encryption algorithms) and post-quantum cryptography algorithms, ensuring protection even if one is compromised.

[0079] This application proposes a post-quantum encryption scheme for digital envelopes, combining traditional encryption algorithms with post-quantum encryption algorithms to improve overall security and feasibility. The scheme utilizes existing certificate systems for public-key authentication. Before encryption using the post-quantum encryption algorithm, the recipient transmits the post-quantum encryption public key using a traditional encryption algorithm. The sender verifies the public key identity and then uses the post-quantum public key to encrypt the transmitted content, ensuring the security of the post-quantum public key authentication. Simultaneously, the SM4 algorithm ultimately used to encrypt secure data is protected by both traditional and post-quantum encryption algorithms, and the ciphertext during transmission does not contain the complete key, further enhancing the scheme's security.

[0080] Figure 1 A schematic diagram of the first certificate-based post-quantum cryptographic migration system provided for this application, including a key sender 11 and a key receiver 12;

[0081] The key sender 11 is used to generate a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the first public key in the first asymmetric public-private key pair to the key receiver 12 through a certificate; the key receiver 12 is used to generate a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the second public key in the second asymmetric public-private key pair to the key sender 11 through a certificate.

[0082] The key sender 11 is used to generate a post-quantum public-private key pair based on the post-quantum encryption algorithm;

[0083] The key sender 11 is used to generate a first symmetric subkey based on a symmetric encryption algorithm;

[0084] The key sender 11 is used to use the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and to sign it with the first private key in the first asymmetric public-private key pair, and to send the first ciphertext to the key receiver 12.

[0085] The key receiver 12 is used to verify the signature of the first ciphertext using the first public key. After the signature is verified, the first ciphertext is decrypted using the second private key in the second asymmetric public-private key pair to obtain the post-quantum public key and the first symmetric subkey.

[0086] The key sender and key receiver are electronic devices, such as cryptographic devices, servers, and smart terminals.

[0087] In this application, the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm. The first asymmetric public-private key pair includes a first public key and a first private key. The first public key is sent to the key receiver via a certificate. The key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm. The second asymmetric public-private key pair includes a second public key and a second private key. The second public key is sent to the key sender via a certificate.

[0088] The key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm; the post-quantum public-private key pair includes a post-quantum public key and a post-quantum private key. The key sender generates a first symmetric subkey based on a symmetric encryption algorithm.

[0089] The key sender uses the second public key sent by the cryptographic receiver to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair. Then, the sender uses the first private key from the first asymmetric public-private key pair to sign the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, obtaining the first ciphertext. The first ciphertext is then sent to the key receiver. The key receiver uses the first public key sent by the cryptographic sender to verify the signature on the first ciphertext. If the signature verification is successful, the receiver uses the second private key from the second asymmetric public-private key pair to decrypt the first ciphertext, obtaining the post-quantum public key and the first symmetric subkey. If the signature verification fails, the sender cannot obtain the post-quantum public key and the first symmetric subkey.

[0090] This application combines traditional asymmetric encryption algorithms, symmetric encryption algorithms, and post-quantum encryption algorithms, improving both the security and feasibility of the overall post-quantum encryption migration scheme. This application utilizes the existing certificate system for public key authentication. Before encryption using the post-quantum cryptography algorithm, the recipient transmits the post-quantum cryptography public key using a traditional encryption algorithm. After verifying the public key identity, the sender uses the post-quantum public key to encrypt the transmitted content, ensuring the security of the post-quantum cryptography public key authentication. Compared to post-quantum key migration schemes that rely on manual distribution, this application improves the efficiency and security of post-quantum cryptography migration.

[0091] Figure 2 A schematic diagram of a second certificate-based post-quantum cryptographic migration system provided in this application, wherein the key receiver 12 is used to generate a second symmetric subkey based on a symmetric encryption algorithm;

[0092] The key receiver 12 is configured to encrypt the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; use the first symmetric subkey and the second symmetric subkey as inputs to a key derivation function to generate a symmetric key; use the symmetric key to encrypt secure data to obtain a third ciphertext; and send the second ciphertext and the third ciphertext to the key sender 11.

[0093] The key sender 11 is configured to decrypt the second ciphertext using the post-quantum private key in the post-quantum public-private key pair to obtain the second symmetric subkey; use the first symmetric subkey and the second symmetric subkey as inputs to the key derivation function to generate the symmetric key; and use the symmetric key to decrypt the third ciphertext to obtain the secure data.

[0094] The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm; the key receiver uses the post-quantum public key sent by the key sender to encrypt the second symmetric subkey to obtain the second ciphertext; the first and second symmetric subkeys sent by the key sender are used as inputs to a key derivation function to generate a symmetric key; the secure data is encrypted using the symmetric key to obtain the third ciphertext; the second and third ciphertexts are sent to the key sender; the key sender uses the post-quantum private key from the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric subkey; the first symmetric subkey and the obtained second symmetric key are used as inputs to a key derivation function to generate a symmetric key; the third ciphertext is decrypted using the symmetric key to obtain the secure data.

[0095] In this application, the encryption algorithm used to encrypt secure data is protected by both traditional encryption algorithms and post-quantum encryption algorithms, and the ciphertext during transmission does not contain the complete key, thereby improving the security of secure data transmission.

[0096] In this application, the asymmetric encryption algorithm includes the domestically developed cryptographic algorithm SM2. The symmetric encryption algorithm includes the domestically developed cryptographic algorithm SM4. The key derivation function includes the KDF function.

[0097] Figure 3 The first certificate-based post-quantum cryptographic migration process provided for this application includes the following steps:

[0098] S101: The key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key of the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key of the second asymmetric public-private key pair to the key sender through a certificate.

[0099] S102: The key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm; the key sender generates a first symmetric subkey based on a symmetric encryption algorithm;

[0100] S103: The key sender uses the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and signs it using the first private key in the first asymmetric public-private key pair to obtain the first ciphertext, which is then sent to the key receiver. The key receiver uses the first public key to verify the signature of the first ciphertext. After successful verification, the receiver uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext, thereby obtaining the post-quantum public key and the first symmetric subkey.

[0101] The first certificate-based post-quantum cryptographic migration method provided in this application is applied to the key sender in a certificate-based post-quantum cryptographic migration system.

[0102] Figure 4 The second certificate-based post-quantum cryptographic migration process provided for this application includes the following steps:

[0103] S201: The key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key of the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key of the second asymmetric public-private key pair to the key sender through a certificate.

[0104] S202: The key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm; the key sender generates a first symmetric subkey based on a symmetric encryption algorithm;

[0105] S203: The key sender uses the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and signs it using the first private key in the first asymmetric public-private key pair to obtain the first ciphertext, which is then sent to the key receiver. The key receiver uses the first public key to verify the signature of the first ciphertext. After successful verification, the receiver uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext, obtaining the post-quantum public key and the first symmetric subkey.

[0106] S204: The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm; the key receiver encrypts the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; the first and second symmetric subkeys are used as inputs to a key derivation function to generate a symmetric key; the symmetric key is used to encrypt secure data to obtain a third ciphertext; the second and third ciphertexts are sent to the key sender.

[0107] S205: The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric subkey; uses the first symmetric subkey and the second symmetric subkey as inputs to the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the secure data.

[0108] Figure 5 The third certificate-based post-quantum cryptographic migration process provided in this application includes the following steps:

[0109] S301: The key recipient generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key of the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key of the first asymmetric public-private key pair to the key recipient through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm.

[0110] S302: The key sender generates a first symmetric subkey based on a symmetric encryption algorithm; the key sender uses the second public key to perform asymmetric encryption on the post-quantum public key pair and the first symmetric subkey, and signs it using the first private key in the first asymmetric public key pair, obtaining a first ciphertext which is sent to the key receiver; the key receiver uses the first public key to verify the signature of the first ciphertext, and after successful verification, uses the second private key in the second asymmetric public key pair to decrypt the first ciphertext, obtaining the post-quantum public key and the first symmetric subkey.

[0111] The third certificate-based post-quantum cryptographic migration method provided in this application is applied to the key receiver in a certificate-based post-quantum cryptographic migration system.

[0112] Figure 6 The fourth certificate-based post-quantum cryptographic migration process provided in this application includes the following steps:

[0113] S401: The key recipient generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key of the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key of the first asymmetric public-private key pair to the key recipient through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm.

[0114] S402: The key sender generates a first symmetric subkey based on a symmetric encryption algorithm; the key sender uses the second public key to perform asymmetric encryption on the post-quantum public key pair and the first symmetric subkey, and signs it using the first private key in the first asymmetric public key pair to obtain a first ciphertext, which is then sent to the key receiver; the key receiver uses the first public key to verify the signature of the first ciphertext, and after successful verification, uses the second private key in the second asymmetric public key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric subkey.

[0115] S403: The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm; the key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain a second ciphertext; the first symmetric subkey and the second symmetric subkey are used as inputs to a key derivation function to generate a symmetric key; the symmetric key is used to encrypt secure data to obtain a third ciphertext; the second ciphertext and the third ciphertext are sent to the key sender;

[0116] S404: The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric subkey; the first symmetric subkey and the second symmetric subkey are used as inputs to the key derivation function to generate the symmetric key; the symmetric key is used to decrypt the third ciphertext to obtain the secure data.

[0117] Figure 7 The schematic diagram of the first certificate-based post-quantum cryptography migration device provided in this application is applied to the key sender. The device includes: a first sending module 21, a first key generation module 22, and a first receiving module 23.

[0118] The first sending module 21 is used to generate a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the first public key in the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key in the second asymmetric public-private key pair to the first receiving module 23 through a certificate.

[0119] The first key generation module 22 is used to generate a post-quantum public-private key pair based on a post-quantum encryption algorithm; and to generate a first symmetric subkey based on a symmetric encryption algorithm.

[0120] The first sending module 21 is used to use the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and to sign it using the first private key in the first asymmetric public-private key pair to obtain a first ciphertext, which is then sent to the key receiver. The key receiver uses the first public key to verify the signature of the first ciphertext, and after successful verification, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric subkey.

[0121] The device further includes: a first decryption module 24;

[0122] The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm; the key receiver encrypts the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; the first and second symmetric subkeys are used as inputs to a key derivation function to generate a symmetric key; the symmetric key is used to encrypt secure data to obtain a third ciphertext; the second and third ciphertexts are sent to the first receiving module 23.

[0123] The first decryption module 24 is used to decrypt the second ciphertext using the post-quantum private key in the post-quantum public-private key pair to obtain the second symmetric subkey; to generate the symmetric key by using the first symmetric subkey and the second symmetric subkey as inputs to the key derivation function; and to decrypt the third ciphertext using the symmetric key to obtain the secure data.

[0124] Figure 8 A schematic diagram of a second certificate-based post-quantum cryptographic migration device provided in this application, applied to a key receiver, the device comprising: a second sending module 31, a second decryption module 32, and a second receiving module 33;

[0125] The second sending module 31 is used to generate a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the second public key in the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key in the first asymmetric public-private key pair to the second receiving module 33 through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm;

[0126] The first symmetric subkey is generated by the key sender based on a symmetric encryption algorithm;

[0127] The key sender uses the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and signs it with the first private key in the first asymmetric public-private key pair to obtain the first ciphertext, which is then sent to the second receiving module 33.

[0128] The second decryption module 32 is used to verify the signature of the first ciphertext using the first public key. After the signature is verified, the first ciphertext is decrypted using the second private key in the second asymmetric public-private key pair to obtain the post-quantum public key and the first symmetric subkey.

[0129] Furthermore, the device also includes: a second key generation module 34;

[0130] The second key generation module 34 is used to generate a second symmetric subkey based on a symmetric encryption algorithm;

[0131] The second sending module is configured to encrypt the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; generate a symmetric key by using the first and second symmetric subkeys as inputs to a key derivation function; encrypt secure data using the symmetric key to obtain a third ciphertext; and send the second ciphertext and the third ciphertext to the key sender.

[0132] The key sender decrypts the second ciphertext using the post-quantum private key in the post-quantum public-private key pair to obtain the second symmetric subkey; the first symmetric subkey and the second symmetric subkey are used as inputs to the key derivation function to generate the symmetric key; the symmetric key is used to decrypt the third ciphertext to obtain the secure data.

[0133] Figure 9 The certificate-based post-quantum cryptography migration flowchart provided for this application includes three stages: key generation, post-quantum public key transmission, and secure data transmission (or sensitive data transmission). Taking the digital envelope mode as a scenario, the algorithm is illustrated below using the national cryptographic algorithm as an example.

[0134] The key generation phase process is as follows:

[0135] Alice, the key sender, generates a first asymmetric public-private key pair based on the SM2 asymmetric encryption algorithm. This first asymmetric public-private key pair includes the first public key (SM2 public key). A ) and the first private key (SM2 private key) A And pass the certificate to the SM2 public key. A Send to the key recipient.

[0136] Key recipient Bob generates a second asymmetric public-private key pair based on the asymmetric encryption algorithm SM2. The second asymmetric public-private key pair includes the second public key (SM2 public key). B ) and the second private key (SM2 private key) B ), and pass the SM2 private key through the certificate. B Send to the key sender.

[0137] Alice, the key sender, generates a post-quantum public-private key pair based on a post-quantum encryption algorithm; the post-quantum public-private key pair includes the post-quantum private key. A and post-quantum public key A .

[0138] Alice, the key sender, generates the first symmetric subkey (key A) based on a symmetric encryption algorithm.

[0139] Bob, the key recipient, generates a second symmetric subkey (key B) based on a symmetric encryption algorithm.

[0140] The post-quantum public key transmission phase is as follows:

[0141] The key sender, Alice, uses the second public key (SM2 public key) of the key receiver, Bob. B ), for the post-quantum public key in the post-quantum public-private key pair AThe first symmetric subkey (key A) is used for asymmetric SM2 encryption, and the first private key (SM2 private key) from the first asymmetric public-private key pair is used. A The key is signed, and the first ciphertext is sent to the key recipient, Bob.

[0142] The key recipient, Bob, uses the first public key (SM2 public key) from the key sender, Alice. A The first ciphertext is verified. If the verification is successful, the second private key (SM2 private key) from the second asymmetric public-private key pair is used. B Decrypt the first ciphertext to obtain the post-quantum public key. A And the first symmetric subkey (key A).

[0143] The process of sensitive data transmission is as follows:

[0144] Key recipient Bob uses the decrypted post-quantum public key A The second symmetric subkey (key B) is encrypted to obtain the second ciphertext; using a key derivation function (KDF function) conforming to GB / T 32918.4, agreed upon beforehand with the key sender Alice, the first symmetric subkey (key A) and the second symmetric subkey (key B) are used as inputs to generate a symmetric key (SM4 key); the de-identified data is encrypted using the symmetric key (SM4 key) to obtain the third ciphertext; the second and third ciphertexts are sent to the key sender Alice;

[0145] Alice, the key sender, uses the post-quantum private key from the post-quantum public-private key pair. A The second ciphertext is decrypted to obtain the second symmetric subkey (key B); Alice, the key sender, uses a key derivation function (KDF function) agreed upon in advance with Bob, which conforms to GB / T32918.4, to generate a symmetric key (SM4 key) by taking the first symmetric subkey (key A) and the second symmetric subkey (key B) as inputs to the key derivation function; the symmetric key (SM4 key) is then used to decrypt the third ciphertext to obtain the plaintext sensitive data.

[0146] This application also provides an electronic device, such as Figure 10 As shown, it includes: processor 41, communication interface 42, memory 43 and communication bus 44, wherein processor 41, communication interface 42 and memory 43 communicate with each other through communication bus 44.

[0147] The memory 43 stores a computer program, which, when executed by the processor 41, causes the processor 41 to perform any of the above method steps.

[0148] The communication bus mentioned in the above electronic devices can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This communication bus can be divided into address bus, data bus, control bus, etc. For ease of illustration, only one thick line is used to represent it in the diagram, but this does not mean that there is only one bus or one type of bus.

[0149] Communication interface 42 is used for communication between the above-mentioned electronic device and other devices.

[0150] The memory may include random access memory (RAM) or non-volatile memory (NVM), such as at least one disk storage device. Optionally, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0151] The processors mentioned above can be general-purpose processors, including central processing units, network processors (NPs), etc.; they can also be digital signal processors (DSPs), application-specific integrated circuits, field-programmable gate arrays or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc.

[0152] This application also provides a computer-readable storage medium storing a computer program executable by an electronic device, which, when run on the electronic device, causes the electronic device to perform any of the above method steps.

[0153] This application provides a computer program product, which includes an executable program that, when executed by a processor, implements the method described herein.

[0154] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0155] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.

Claims

1. A certificate-based post-quantum cryptographic migration system, characterized in that, The system includes: a key sender and a key receiver; The key sender is configured to generate a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and send the first public key of the first asymmetric public-private key pair to the key receiver via a certificate; the key receiver is configured to generate a second asymmetric public-private key pair based on the asymmetric encryption algorithm, and send the second public key of the second asymmetric public-private key pair to the key sender via a certificate. The key sender is used to generate a post-quantum public-private key pair based on the post-quantum encryption algorithm; The key sender is used to generate a first symmetric subkey based on a symmetric encryption algorithm; The key sender is used to use the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and to sign it with the first private key in the first asymmetric public-private key pair to obtain the first ciphertext and send it to the key receiver. The key receiver is used to verify the signature of the first ciphertext using the first public key. After the signature is verified, the receiver uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext and obtain the post-quantum public key and the first symmetric subkey. The key receiver is used to generate a second symmetric subkey based on the symmetric encryption algorithm; The key receiver is configured to encrypt the second symmetric subkey using the post-quantum public key to obtain a second ciphertext; use the first symmetric subkey and the second symmetric subkey as inputs to a key derivation function to generate a symmetric key; use the symmetric key to encrypt secure data to obtain a third ciphertext; and send the second ciphertext and the third ciphertext to the key sender. The key sender is configured to decrypt the second ciphertext using the post-quantum private key in the post-quantum public-private key pair to obtain the second symmetric subkey; use the first symmetric subkey and the second symmetric subkey as inputs to the key derivation function to generate the symmetric key; and use the symmetric key to decrypt the third ciphertext to obtain the secure data.

2. The system as described in claim 1, characterized in that, The asymmetric encryption algorithm includes the domestically developed cryptographic algorithm SM2.

3. The system as described in claim 1, characterized in that, The symmetric encryption algorithm includes the domestically developed cryptographic algorithm SM4.

4. The system as described in claim 1, characterized in that, The key derivation function includes the KDF function.

5. A certificate-based post-quantum cryptographic migration method, characterized in that, Applied to the key sender, the method includes: The key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key of the first asymmetric public-private key pair to the key receiver through a certificate; the key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key of the second asymmetric public-private key pair to the key sender through a certificate. The key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm; The key sender generates a first symmetric subkey based on a symmetric encryption algorithm; The key sender uses the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and signs it using the first private key in the first asymmetric public-private key pair to obtain the first ciphertext, which is then sent to the key receiver. The key receiver uses the first public key to verify the signature of the first ciphertext, and after successful verification, uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric subkey. The method further includes: The key recipient generates a second symmetric subkey based on a symmetric encryption algorithm; The key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain the second ciphertext; the first and second symmetric subkeys are used as inputs to a key derivation function to generate a symmetric key; the symmetric key is used to encrypt secure data to obtain the third ciphertext; the second and third ciphertexts are then sent to the key sender. The key sender uses the post-quantum private key in the post-quantum public-private key pair to decrypt the second ciphertext to obtain the second symmetric subkey; uses the first symmetric subkey and the second symmetric subkey as inputs to the key derivation function to generate the symmetric key; and uses the symmetric key to decrypt the third ciphertext to obtain the secure data.

6. A certificate-based post-quantum cryptographic migration method, characterized in that, Applied to the key receiver, the method includes: The key receiver generates a second asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the second public key of the second asymmetric public-private key pair to the key sender through a certificate; the key sender generates a first asymmetric public-private key pair based on an asymmetric encryption algorithm, and sends the first public key of the first asymmetric public-private key pair to the key receiver through a certificate; the key sender generates a post-quantum public-private key pair based on a post-quantum encryption algorithm. The first symmetric subkey is generated by the key sender based on a symmetric encryption algorithm; The key sender uses the second public key to perform asymmetric encryption on the post-quantum public key and the first symmetric subkey in the post-quantum public-private key pair, and signs it using the first private key in the first asymmetric public-private key pair to obtain the first ciphertext, which is then sent to the key receiver. The key receiver uses the first public key to verify the signature of the first ciphertext. After successful verification, the receiver uses the second private key in the second asymmetric public-private key pair to decrypt the first ciphertext to obtain the post-quantum public key and the first symmetric subkey. The method further includes: The key receiver generates a second symmetric subkey based on a symmetric encryption algorithm; The key receiver uses the post-quantum public key to encrypt the second symmetric subkey to obtain the second ciphertext; uses the first symmetric subkey and the second symmetric subkey as inputs to the key derivation function to generate a symmetric key; uses the symmetric key to encrypt secure data to obtain the third ciphertext; and sends the second ciphertext and the third ciphertext to the key sender. The key sender decrypts the second ciphertext using the post-quantum private key in the post-quantum public-private key pair to obtain the second symmetric subkey; the first symmetric subkey and the second symmetric subkey are used as inputs to the key derivation function to generate the symmetric key; the symmetric key is used to decrypt the third ciphertext to obtain the secure data.

7. An electronic device, characterized in that, It includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus; Memory, used to store computer programs; A processor, when executing a program stored in memory, implements the method of claim 5 or 6.

8. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the method of claim 5 or 6.

9. A computer program product, characterized in that, The computer program product includes an executable program that is executed by a processor to implement the method of claim 5 or 6.

Images