Method, device, equipment and medium for being compatible with post quantum and traditional public key

Abstract

The embodiment of the invention discloses a post quantum and traditional public key compatible method, device and equipment and a medium, and relates to the technical field of password application, and the method comprises the steps: generating a trusted certificate which comprises additional public key information extension, additional signature algorithm extension and additional signature value extension; when the credible certificate is verified, judging whether the verification system supports a post quantum cryptography algorithm or not; if not, verifying a certificate signature value of a preset traditional cryptographic algorithm in the credible certificate; and if yes, verifying a certificate signature value of a traditional cryptographic algorithm preset in the credible certificate, and verifying a certificate signature value of the post-quantum cryptographic algorithm based on the additional public key information extension, the additional signature algorithm extension and the additional signature value extension. According to the method, a powerful post-quantum cryptographic algorithm is introduced and supported to cope with quantum threats, seamless compatibility with existing systems and equipment depending on a traditional public key cryptographic algorithm is ensured, and destructive influence on existing huge and key information infrastructures is avoided.

Description

Technical Field

[0001] This invention relates to the field of cryptographic application technology, and in particular to a method, apparatus, device, and medium compatible with both post-quantum and traditional public keys. Background Technology

[0002] With the continued breakthroughs in quantum computing technology, its immense computing power poses an unprecedented and imminent security threat to the widely deployed classical public-key cryptosystems. In particular, the theoretical feasibility of Shor's algorithm indicates that once a practical quantum computer is developed, the foundation of mainstream traditional cryptographic algorithms (such as RSA and ECC) based on large integer factorization or discrete logarithm problems will be completely shaken, rendering their security utterly ineffective. This potential disruptive risk compels the global cryptography community and security industry to prepare for the future by seeking and deploying new cryptographic systems capable of resisting quantum computing attacks—that is, post-quantum cryptography (PQC).

[0003] Against this backdrop, the National Institute of Standards and Technology (NIST), a leading international standards organization, took on the crucial role of standardization, launching a global post-quantum cryptography (PQC) standardization project several years ago. This project aimed to select next-generation cryptographic algorithms from a large pool of candidate algorithms submitted globally, ensuring broad security, acceptable performance, and suitability for standardization. After multiple rounds of rigorous security assessments, performance analyses, and public discussions, NIST finalized the first batch of PQC algorithms, marking a crucial step from theoretical research to practical application. These PQC algorithms encompass core functions in cryptography: including lattice-theory-based key encapsulation mechanisms (such as ML-KEM) for secure key exchange, lattice-theory-based digital signature algorithms (such as ML-DSA) for authentication and data integrity, and stateless digital signature algorithms based on hash functions (such as SLH-DSA) as backup schemes. The standardization of these algorithms lays the algorithmic foundation for building quantum-resistant information security infrastructure.

[0004] However, establishing a standard algorithm is merely the beginning of a long migration journey. Truly integrating post-quantum cryptography algorithms into the existing, vast, and complex ecosystem of cryptographic applications faces extremely severe compatibility challenges. The vast majority of existing secure communication systems, authentication systems, digital certificate infrastructures (such as the widely used X.509 certificate), and the hardware and software platforms they rely on are designed and built based on traditional public-key cryptography algorithms. These systems have undergone long-term development and deployment, establishing robust interoperability standards and a large user base. Adopting a radical, complete replacement strategy, forcing all systems to simultaneously upgrade to versions supporting only post-quantum cryptography, would not only be incredibly difficult and costly to implement, but would almost certainly lead to severe interoperability disruptions between the old and new systems, causing catastrophic consequences such as service unavailability and business interruptions. Furthermore, considering the heterogeneity of global IT infrastructure and the differences in upgrade cycles, this "one-size-fits-all" migration approach is practically impossible in reality. Therefore, how to introduce and support robust post-quantum cryptography algorithms to address quantum threats while ensuring seamless compatibility with existing systems and devices that rely on traditional public-key cryptography algorithms, and avoiding disruptive impacts on existing large and critical information infrastructure, has become a core and urgent technical challenge in the post-quantum cryptography migration process. Summary of the Invention

[0005] This invention provides a method, apparatus, device, and medium that are compatible with both post-quantum and traditional public-key cryptography. The technical problem to be solved is how to introduce and support powerful post-quantum cryptography algorithms to cope with quantum threats while ensuring seamless compatibility with existing systems and devices that rely on traditional public-key cryptography algorithms, and avoiding destructive impacts on existing large and critical information infrastructure.

[0006] In a first aspect, embodiments of the present invention provide a method compatible with both post-quantum and traditional public-key cryptography, comprising:

[0007] Generate a trusted certificate, which includes additional public key information extension, additional signature algorithm extension, and additional signature value extension. The additional public key information extension is used to store the public key information of the post-quantum cryptography algorithm, the additional signature algorithm extension is used to store the post-quantum signature algorithm identifier, and the additional signature value extension is used to store the certificate signature value of the post-quantum cryptography algorithm.

[0008] When verifying the trusted credential, it is determined whether the verification system supports post-quantum cryptography algorithms;

[0009] If the verification system does not support post-quantum cryptography, verify the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential;

[0010] If the verification system supports post-quantum cryptography, it verifies the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential, and verifies the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, additional signature algorithm extension, and additional signature value extension.

[0011] Optionally, generating trusted credentials includes:

[0012] The certificate applicant generates a first key pair for the conventional cryptographic algorithm and a second key pair for the post-quantum cryptographic algorithm. The first key pair includes a first public key and a first private key, and the second key pair includes a second public key and a second private key.

[0013] The certificate applicant submits a certificate application to the certificate authority, the certificate application including the first public key and the second public key;

[0014] After the certificate applicant's identity is verified, the certificate authority generates the certificate signature value of the traditional cryptographic algorithm and the certificate signature value of the post-quantum cryptographic algorithm.

[0015] The certificate authority generates the trusted credential based on the certificate signature value of the traditional cryptographic algorithm and the certificate signature value of the post-quantum cryptographic algorithm, and sends the trusted credential to the certificate applicant.

[0016] Optionally, verifying the certificate signature value of the preset traditional cryptographic algorithm in the trusted credential includes:

[0017] Extract the first public key from the trusted credential;

[0018] Verify the certificate chain of the trusted credential;

[0019] If the certificate chain verification of the trusted credential passes, the certificate signature value of the traditional cryptographic algorithm is verified using the first public key.

[0020] Optionally, verifying the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, the additional signature algorithm extension, and the additional signature value extension includes:

[0021] Extract the second public key from the trusted credential;

[0022] The identifier of the post-quantum signature algorithm is verified;

[0023] If the post-quantum signature algorithm identifier verification passes, the certificate signature value of the post-quantum cryptography algorithm is verified using the second public key.

[0024] Optionally, the method further includes:

[0025] If the verification system does not support post-quantum cryptography, the verification result of the traditional cryptography algorithm shall be used to determine whether the trusted credential has been verified.

[0026] If the verification system supports post-quantum cryptography, then the system determines whether the trusted credential passes verification based on the preset verification strategy and the verification results of the traditional cryptography algorithm and the post-quantum cryptography algorithm.

[0027] Optionally, determining whether the trusted credential passes verification based on a preset verification strategy and the verification results of the traditional cryptographic algorithm and the post-quantum cryptographic algorithm includes:

[0028] If the verification strategy is in strict mode, the trusted credential is deemed to have passed verification when both the traditional cryptographic algorithm and the post-quantum cryptographic algorithm pass the verification.

[0029] If the verification strategy is traditional priority, the trusted credential is deemed to have passed verification when the verification result of the traditional cryptographic algorithm is successful.

[0030] If the verification strategy is post-quantum priority, the trusted credential is deemed to have passed verification when the verification result of the post-quantum cryptographic algorithm is successful.

[0031] Optionally, the method further includes:

[0032] If the conventional cryptographic algorithm and / or the post-quantum cryptographic algorithm are updated, the trusted credential is regenerated.

[0033] Secondly, embodiments of the present invention also provide an apparatus compatible with both post-quantum and traditional public-key methods, comprising a unit for performing the above-described method.

[0034] Thirdly, embodiments of the present invention also provide a computer device, which includes a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the above-described method.

[0035] Fourthly, embodiments of the present invention also provide a computer-readable storage medium storing a computer program that, when executed by a processor, can implement the above-described method.

[0036] This invention provides a method, apparatus, device, and medium compatible with both post-quantum and traditional public-key cryptography. The method includes: generating a trusted credential, the trusted credential including additional public key information extensions, additional signature algorithm extensions, and additional signature value extensions. The additional public key information extensions store public key information for a post-quantum cryptography algorithm, the additional signature algorithm extensions store a post-quantum signature algorithm identifier, and the additional signature value extensions store a certificate signature value for the post-quantum cryptography algorithm. When verifying the trusted credential, the method determines whether the verification system supports post-quantum cryptography algorithms. If the verification system does not support post-quantum cryptography algorithms, the method verifies the certificate signature value of a pre-defined traditional cryptography algorithm in the trusted credential. If the verification system supports post-quantum cryptography algorithms, the method verifies the certificate signature value of the pre-defined traditional cryptography algorithm in the trusted credential, and verifies the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extensions, additional signature algorithm extensions, and additional signature value extensions. This invention can introduce and support powerful post-quantum cryptography algorithms to address quantum threats while ensuring seamless compatibility with existing systems and devices that rely on traditional public-key cryptography algorithms, avoiding destructive impacts on existing large and critical information infrastructure. Attached Figure Description

[0037] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the following description of the embodiments will be briefly introduced. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0038] Figure 1 A flowchart illustrating a method compatible with both post-quantum and traditional public-key cryptography, provided as an embodiment of the present invention;

[0039] Figure 2 This is a schematic diagram of the process for generating trusted credentials provided in an embodiment of the present invention;

[0040] Figure 3 A schematic diagram of the certificate verification process provided in this embodiment of the invention;

[0041] Figure 4 A schematic diagram illustrating the certificate update process provided in an embodiment of the present invention;

[0042] Figure 5 This is a schematic block diagram of a computer device provided in an embodiment of the present invention. Detailed Implementation

[0043] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0044] It should be understood that, when used in this specification and the appended claims, the terms "comprising" and "including" indicate the presence of the described features, integrals, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or collections thereof.

[0045] It should also be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the invention. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.

[0046] It should also be further understood that the term "and / or" as used in this specification and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.

[0047] As used in this specification and the appended claims, the term "if" may be interpreted, depending on the context, as "when," "once," "in response to determination," or "in response to detection." Similarly, the phrases "if determined" or "if [the described condition or event] is detected" may be interpreted, depending on the context, as meaning "once determined," "in response to determination," "once [the described condition or event] is detected," or "in response to detection of [the described condition or event]."

[0048] Please see Figure 1 This invention provides a method compatible with both post-quantum and traditional public-key cryptography, the method comprising the following steps:

[0049] S1, Generate a trusted certificate, which includes additional public key information extension, additional signature algorithm extension, and additional signature value extension. The additional public key information extension is used to store the public key information of the post-quantum cryptography algorithm, the additional signature algorithm extension is used to store the post-quantum signature algorithm identifier, and the additional signature value extension is used to store the certificate signature value of the post-quantum cryptography algorithm.

[0050] In practice, the trusted credentials are built on the trusted identity credential framework in the GB / T 43779 standard. This credential architecture extends the existing X.509 certificate format to support post-quantum cryptography algorithms without compromising the compatibility of existing systems.

[0051] Specifically, to achieve compatibility with both post-quantum cryptography and traditional cryptography, this scheme designs three key extensions:

[0052] ExtraPublicKeyInfo: Used to store public key information for post-quantum cryptography algorithms, including the algorithm identifier and public key value.

[0053] ExtraSignatureAlgorithm: Used to identify the post-quantum signature algorithm used in the certificate.

[0054] ExtraSignatureValue: Used to store the certificate signature value generated using the post-quantum cryptography algorithm.

[0055] These extensions are all marked as "non-critical" to ensure that systems that do not support these extensions can safely ignore them and only verify the traditional public key portion.

[0056] Furthermore, the present invention integrates the NIST-standardized post-quantum cryptography algorithm into the CHAKEN trusted communication system, mainly including:

[0057] ML-KEM (Kyber): Used for key encapsulation mechanisms, replacing traditional RSA or DH key exchange.

[0058] ML-DSA (Dilithium): Used for digital signatures, replacing traditional RSA or ECDSA signatures.

[0059] SLH-DSA(SPHINCS+): as an alternative stateless hash signature algorithm.

[0060] In the extended fields, define the algorithm identifier according to the following table:

[0061] Table 1. Post-quantum cryptography algorithm table

[0062]

[0063] In some preferred embodiments, see Figure 2The above step of "generating a trusted credential" specifically includes the following steps: The certificate applicant generates a first key pair for the conventional cryptographic algorithm and a second key pair for the post-quantum cryptographic algorithm. The first key pair includes a first public key and a first private key, and the second key pair includes a second public key and a second private key. The certificate applicant submits a certificate application to a certificate authority, the certificate application including the first public key and the second public key. After the certificate applicant's identity is verified, the certificate authority generates a certificate signature value for the conventional cryptographic algorithm and a certificate signature value for the post-quantum cryptographic algorithm. The certificate authority generates the trusted credential based on the certificate signature values ​​of the conventional cryptographic algorithm and the post-quantum cryptographic algorithm, and sends the trusted credential to the certificate applicant.

[0064] In this embodiment of the invention, the certificate applicant generates a first key pair using a conventional cryptographic algorithm and a second key pair using a post-quantum cryptographic algorithm. The first key pair includes a first public key and a first private key. The second key pair includes a second public key and a second private key.

[0065] Furthermore, the certificate applicant submits a certificate application to the certificate authority. The certificate application includes a first public key and a second public key.

[0066] Furthermore, the certificate authority first verifies the identity of the certificate applicant. Upon successful verification, the certificate authority generates a certificate signature value for both the traditional cryptographic algorithm and the post-quantum cryptographic algorithm. Based on these two certificate signature values, the trusted credential is generated and sent to the certificate applicant.

[0067] Specifically, when generating trusted credentials, certificate authorities add corresponding content to the additional public key information extension, additional signature algorithm extension, and additional signature value extension of the trusted credentials.

[0068] S2, when verifying the trusted credential, determine whether the verification system supports post-quantum cryptography algorithms.

[0069] In practice, the verification system can be a trusted communication system. When the verification system receives the trusted credential and needs to verify it, it determines whether the verification system supports post-quantum cryptography algorithms. Specifically, it can determine whether the verification system supports post-quantum cryptography algorithms by whether it includes a verification module for post-quantum cryptography algorithms. If it does, it is determined to support them; otherwise, it is determined not to support them.

[0070] S3. If the verification system does not support post-quantum cryptography, verify the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential.

[0071] In practice, if the verification system does not support post-quantum cryptography, it only verifies the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential. Meanwhile, any additional public key information extensions, additional signature algorithm extensions, and additional signature value extensions in the trusted credential are ignored.

[0072] In some preferred embodiments, the above step "verifying the certificate signature value of the preset traditional cryptographic algorithm in the trusted credential" specifically includes the following steps: extracting the first public key from the trusted credential; verifying the certificate chain of the trusted credential; if the certificate chain of the trusted credential passes verification, verifying the certificate signature value of the traditional cryptographic algorithm using the first public key.

[0073] In this invention, the traditional cryptographic algorithm verification path strictly adheres to existing certificate chain verification rules (such as the X.509 specification). Specifically, a first public key (such as an RSA public key) is extracted from a trusted credential, and the validity of the certificate chain is verified (e.g., checking the revocation status of the issuing CA). Then, this first public key is used to verify the certificate signature value of the traditional cryptographic algorithm. This process reuses the verification logic of existing infrastructure. This design maximizes the preservation of the existing system's verification framework, avoids rewriting the verification engine due to the introduction of post-quantum cryptographic algorithm extensions, and significantly reduces system modification costs. Simultaneously, the prerequisites for certificate chain verification (such as trust in the CA root certificate) eliminate the risk of forged credentials from the source, maintaining the stability of the trust system in traditional environments.

[0074] Furthermore, the method also includes: if the verification system does not support post-quantum cryptography, then determining whether the trusted credential has been verified based on the verification result of the traditional cryptography algorithm.

[0075] Specifically, if the verification result of the traditional cryptographic algorithm is successful, the trusted credential is deemed to have passed verification; if the verification result of the traditional cryptographic algorithm is unsuccessful, the trusted credential is deemed to have failed verification.

[0076] S4, if the verification system supports post-quantum cryptography, verify the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential, and verify the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, additional signature algorithm extension, and additional signature value extension.

[0077] In specific implementation, if the verification system supports post-quantum cryptography, it verifies the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential, and verifies the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, additional signature algorithm extension, and additional signature value extension.

[0078] In this invention, when the verification system supports post-quantum cryptography, it can simultaneously verify the certificate signature values ​​of both traditional cryptography and post-quantum cryptography, forming a dual-algorithm security redundancy: even if the traditional cryptography is cracked due to quantum computing, the post-quantum cryptography can still independently provide security.

[0079] In some preferred embodiments, the above step "verifying the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, additional signature algorithm extension, and additional signature value extension" specifically includes the following steps: extracting the second public key from the trusted credential; verifying the post-quantum signature algorithm identifier; if the post-quantum signature algorithm identifier passes the verification, verifying the certificate signature value of the post-quantum cryptography algorithm using the second public key.

[0080] In specific implementation, verifying the post-quantum signature algorithm identifier includes: determining whether the post-quantum signature algorithm identifier matches a preset post-quantum cryptographic algorithm table (such as Table 1). If the post-quantum signature algorithm identifier is recorded in Table 1, a match is determined; otherwise, a mismatch is determined, the verification fails, and an error is reported. Further, it is determined whether the post-quantum signature algorithm identifier is the same as the algorithm identifier in the public key information. If they are the same, the verification is determined to pass; otherwise, the verification fails, and an error is reported.

[0081] Furthermore, if the post-quantum signature algorithm identifier verification passes, the certificate signature value of the post-quantum cryptography algorithm is verified using the second public key.

[0082] In this invention, the post-quantum cryptography algorithm verification path solves the security adaptation problem in the integration of new algorithms by first verifying the algorithm identifier and then verifying the signature. After extracting the second public key (such as the Kyber public key), the legitimacy of the post-quantum signature algorithm identifier in the additional signature algorithm extension needs to be verified first (such as checking whether it is a standard algorithm supported by the system) before performing signature verification, which can effectively improve security.

[0083] Furthermore, the method further includes: if the verification system supports post-quantum cryptography, then determining whether the trusted credential passes verification based on a preset verification strategy and the verification results of the traditional cryptography algorithm and the post-quantum cryptography algorithm.

[0084] In specific implementation, if the verification system supports post-quantum cryptography, the verification success of the trusted credential is determined based on a preset verification strategy and the verification results of the traditional cryptography algorithm and the post-quantum cryptography algorithm. The verification strategy can be set by those skilled in the art, and this invention is not specifically limited thereto.

[0085] For example, see Figure 3In some preferred embodiments, the above step "determining whether the trusted credential passes verification based on the preset verification strategy and the verification results of the conventional cryptographic algorithm and the post-quantum cryptographic algorithm" specifically includes the following steps: if the verification strategy is strict mode, the trusted credential is determined to pass verification when both the conventional cryptographic algorithm and the post-quantum cryptographic algorithm pass verification; if the verification strategy is conventional priority, the trusted credential is determined to pass verification when the conventional cryptographic algorithm passes verification; if the verification strategy is post-quantum priority, the trusted credential is determined to pass verification when the post-quantum cryptographic algorithm passes verification.

[0086] In specific implementation, when the verification strategy is in strict mode, the trusted credential is deemed to have passed verification only if both the traditional cryptographic algorithm and the post-quantum cryptographic algorithm pass the verification.

[0087] Furthermore, when the verification strategy is traditional priority, the trusted credential is deemed to have passed verification when the verification result of the traditional cryptographic algorithm is "verification passed".

[0088] Furthermore, when the verification strategy is post-quantum priority, the trusted credential is deemed to have passed verification when the verification result of the post-quantum cryptographic algorithm is "verification passed".

[0089] In some preferred embodiments, the method further includes the following step: if the conventional cryptographic algorithm and / or the post-quantum cryptographic algorithm is updated, the trusted credential is regenerated.

[0090] In specific implementation, see Figure 4 When a change in the security of the traditional cryptographic algorithm and / or the post-quantum cryptographic algorithm is detected, and it is necessary to update the traditional cryptographic algorithm and / or the post-quantum cryptographic algorithm, the trusted credentials can be regenerated based on the scheme in step S1 above, the old trusted credentials can be revoked, and the newly generated trusted credentials can be deployed, thereby greatly improving security.

[0091] Furthermore, based on the technical concept of this invention, the following extended solutions can be made without exceeding the scope of protection of this invention:

[0092] 1. Multi-algorithm support framework

[0093] This scheme can be further expanded into a general framework that supports a variety of post-quantum cryptography algorithms. In addition to NIST standard algorithms, it can also integrate Chinese commercial cryptographic algorithms and other international algorithms, providing a wider range of algorithm choices.

[0094] 2 Hardware acceleration support

[0095] It can be integrated with a hardware security module (HSM) or smart cryptographic key to accelerate post-quantum cryptographic algorithm computation using hardware, thereby solving the computationally intensive problem of post-quantum cryptographic algorithms and improving system performance.

[0096] 3. Dynamic Algorithm Negotiation Mechanism

[0097] A dynamic algorithm negotiation mechanism is added, allowing both communicating parties to automatically select the optimal algorithm combination based on their respective supported algorithm sets, further improving the system's flexibility and adaptability.

[0098] 4. Blockchain-based certificate management

[0099] By combining hybrid certificates (trusted credentials) with blockchain technology, a decentralized certificate management system can be established, improving the transparency and immutability of certificates and providing a more secure infrastructure for large-scale deployment.

[0100] 5. Applied to other cryptographic infrastructures

[0101] The design concepts and technologies of this solution can be extended to other cryptographic infrastructures, such as VPNs, SSL / TLS, and secure email, forming a comprehensive post-quantum cryptography transition solution.

[0102] This invention proposes a method compatible with both post-quantum and traditional public-key cryptography, comprising: generating a trusted certificate, wherein the trusted certificate includes additional public key information extension, additional signature algorithm extension, and additional signature value extension; the additional public key information extension stores the public key information of the post-quantum cryptography algorithm, the additional signature algorithm extension stores the post-quantum signature algorithm identifier, and the additional signature value extension stores the certificate signature value of the post-quantum cryptography algorithm; when verifying the trusted certificate, determining whether the verification system supports the post-quantum cryptography algorithm; if the verification system does not support the post-quantum cryptography algorithm, verifying the certificate signature value of the traditional cryptography algorithm preset in the trusted certificate; if the verification system supports the post-quantum cryptography algorithm, verifying the certificate signature value of the traditional cryptography algorithm preset in the trusted certificate, and verifying the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, additional signature algorithm extension, and additional signature value extension. This invention can introduce and support powerful post-quantum cryptography algorithms to address quantum threats while ensuring seamless compatibility with existing systems and devices that rely on traditional public-key cryptography algorithms, avoiding destructive impacts on existing large and critical information infrastructure.

[0103] This technical solution fundamentally resolves the core contradiction in the post-quantum cryptography migration process—the conflict between the need to introduce new cryptographic algorithms under the threat of quantum computing and the compatibility of the existing massive infrastructure—by designing a trusted credential structure that includes additional public key information extensions, additional signature algorithm extensions, and additional signature value extensions. It also dynamically selects the verification path based on the verification system's capabilities. Because the additional extension fields strictly adhere to non-critical design specifications, traditional verification systems can automatically ignore unrecognizable extension fields according to the X.509 standard protocol when processing such credentials, only needing to verify the preset traditional cryptographic algorithm signature value. This ensures that billions of existing traditional devices can seamlessly support hybrid certificates without any modifications, completely avoiding the risk of business interruption due to algorithm upgrades. Simultaneously, the new system supporting post-quantum cryptography can synchronously call the post-quantum public key information, algorithm identifier, and signature value in the extension fields during the verification process, forming a security redundancy barrier through a dual verification mechanism: even if the traditional cryptographic algorithm is cracked due to quantum computing breakthroughs, the post-quantum cryptographic algorithm can still independently provide cryptographic security guarantees. This collaborative protection mechanism significantly enhances the system's resilience against unknown threats. More importantly, this solution, through its technical architecture that allows a single certificate to simultaneously support two types of algorithms, eliminates the complexity and operational costs of maintaining two independent certificate systems in parallel, as required by traditional migration solutions. This enables various organizations to flexibly formulate migration strategies based on their actual risk profiles—allowing traditional systems to be gradually phased out or allowing new systems to prioritize quantum-secure verification, ultimately achieving a smooth evolution of the cryptographic system while ensuring business continuity. Essentially, the effectiveness of this technology stems from the innovative application of a certificate extension mechanism: embedding post-quantum elements into the existing credential framework in a non-critical extension form. This preserves the integrity of the traditional verification path while reserving standardized interfaces for future security upgrades, thus building sustainable security capabilities for critical information infrastructure during the transition period of cryptographic paradigm shifts.

[0104] Furthermore, the present invention has the following advantages:

[0105] 1 Seamless compatibility

[0106] This solution ensures seamless compatibility between hybrid certificates (trusted credentials) and existing infrastructure through a non-critical extension design. Systems that do not support post-quantum cryptography can securely ignore the extension fields and continue operating using only the traditional cryptographic algorithm portion without any modifications.

[0107] 2. Smooth transition capability

[0108] It provides a smooth transition path from traditional cryptographic algorithms to post-quantum cryptographic algorithms, avoiding the risks associated with a "one-size-fits-all" migration. Trusted communication systems can gradually implement post-quantum cryptographic algorithms according to their own needs and security assessments, reducing migration risks.

[0109] 3 Enhanced security protection

[0110] By simultaneously employing traditional cryptographic algorithms and post-quantum cryptographic algorithms, the security concept of "hybrid cryptography" is realized. Even if one algorithm is compromised, the other can still provide security, greatly improving the system's ability to resist unknown threats.

[0111] 4 Standards Compatibility

[0112] This design fully complies with the GB / T 43779 standard and the X.509 certificate specification. It also adopts the NIST-standardized post-quantum cryptography algorithm, ensuring the standardization and authority of the solution and facilitating its widespread application.

[0113] 5. Low implementation cost

[0114] Compared to completely rebuilding the cryptographic infrastructure, this solution only requires adding post-quantum cryptographic algorithm support to the existing system, significantly reducing implementation costs. This low-cost, high-efficiency solution is particularly important for large organizations and government agencies.

[0115] 6 Flexible security strategies

[0116] By using different verification modes (strict mode, traditional priority mode, and post-quantum priority mode), system administrators can flexibly configure security policies according to actual needs, balancing security and compatibility.

[0117] Corresponding to the above-described method for compatibility with both post-quantum and traditional public keys, the present invention also provides an apparatus compatible with both post-quantum and traditional public keys. This apparatus includes a unit for performing the above-described method for compatibility with both post-quantum and traditional public keys, and can be configured in a desktop computer, tablet computer, laptop computer, or other terminal. Specifically, the apparatus for compatibility with both post-quantum and traditional public keys includes:

[0118] A generation unit is used to generate a trusted certificate, which includes additional public key information extension, additional signature algorithm extension, and additional signature value extension. The additional public key information extension is used to store the public key information of the post-quantum cryptography algorithm, the additional signature algorithm extension is used to store the post-quantum signature algorithm identifier, and the additional signature value extension is used to store the certificate signature value of the post-quantum cryptography algorithm.

[0119] The judgment unit determines whether the verification system supports post-quantum cryptography algorithms when verifying the trusted credential.

[0120] The first verification unit is used to verify the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential if the verification system does not support the post-quantum cryptographic algorithm.

[0121] The second verification unit is used to verify the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential if the verification system supports the post-quantum cryptographic algorithm, and to verify the certificate signature value of the post-quantum cryptographic algorithm based on the additional public key information extension, the additional signature algorithm extension and the additional signature value extension.

[0122] In some preferred embodiments, generating trusted credentials includes:

[0123] The certificate applicant generates a first key pair for the conventional cryptographic algorithm and a second key pair for the post-quantum cryptographic algorithm. The first key pair includes a first public key and a first private key, and the second key pair includes a second public key and a second private key.

[0124] The certificate applicant submits a certificate application to the certificate authority, the certificate application including the first public key and the second public key;

[0125] After the certificate applicant's identity is verified, the certificate authority generates the certificate signature value of the traditional cryptographic algorithm and the certificate signature value of the post-quantum cryptographic algorithm.

[0126] The certificate authority generates the trusted credential based on the certificate signature value of the traditional cryptographic algorithm and the certificate signature value of the post-quantum cryptographic algorithm, and sends the trusted credential to the certificate applicant.

[0127] In some preferred embodiments, verifying the certificate signature value of the preset conventional cryptographic algorithm in the trusted credential includes:

[0128] Extract the first public key from the trusted credential;

[0129] Verify the certificate chain of the trusted credential;

[0130] If the certificate chain verification of the trusted credential passes, the certificate signature value of the traditional cryptographic algorithm is verified using the first public key.

[0131] In some preferred embodiments, verifying the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, the additional signature algorithm extension, and the additional signature value extension includes:

[0132] Extract the second public key from the trusted credential;

[0133] The identifier of the post-quantum signature algorithm is verified;

[0134] If the post-quantum signature algorithm identifier verification passes, the certificate signature value of the post-quantum cryptography algorithm is verified using the second public key.

[0135] In some preferred embodiments, the method further includes:

[0136] If the verification system does not support post-quantum cryptography, the verification result of the traditional cryptography algorithm shall be used to determine whether the trusted credential has been verified.

[0137] If the verification system supports post-quantum cryptography, then the system determines whether the trusted credential passes verification based on the preset verification strategy and the verification results of the traditional cryptography algorithm and the post-quantum cryptography algorithm.

[0138] In some preferred embodiments, determining whether the trusted credential passes verification based on a preset verification strategy and the verification results of the traditional cryptographic algorithm and the post-quantum cryptographic algorithm includes:

[0139] If the verification strategy is in strict mode, the trusted credential is deemed to have passed verification when both the traditional cryptographic algorithm and the post-quantum cryptographic algorithm pass the verification.

[0140] If the verification strategy is traditional priority, the trusted credential is deemed to have passed verification when the verification result of the traditional cryptographic algorithm is successful.

[0141] If the verification strategy is post-quantum priority, the trusted credential is deemed to have passed verification when the verification result of the post-quantum cryptographic algorithm is successful.

[0142] In some preferred embodiments, the method further includes:

[0143] If the conventional cryptographic algorithm and / or the post-quantum cryptographic algorithm are updated, the trusted credential is regenerated.

[0144] It should be noted that those skilled in the art can clearly understand that the specific implementation process of the above-mentioned device and its units that are compatible with both post-quantum and traditional public keys can be referred to the corresponding descriptions in the foregoing method embodiments. For the sake of convenience and brevity, these details will not be repeated here.

[0145] The aforementioned device, compatible with both post-quantum and traditional public-key computing, can be implemented as a computer program that can be used in various ways, such as... Figure 5 It runs on the computer device shown.

[0146] Please see Figure 5 , Figure 5This is a schematic block diagram of a computer device provided in an embodiment of this application. The computer device 500 can be a terminal or a server. The terminal can be an electronic device with communication functions, such as a smartphone, tablet, laptop, desktop computer, personal digital assistant, or wearable device. The server can be a standalone server or a server cluster composed of multiple servers.

[0147] The computer device 500 includes a processor 502, a memory, and a network interface 505 connected via a system bus 501. The memory may include a non-volatile storage medium 503 and internal memory 504.

[0148] The non-volatile storage medium 503 may store an operating system 5031 and a computer program 5032. When the computer program 5032 is executed, it enables the processor 502 to perform a method compatible with both post-quantum and traditional public-key methods.

[0149] The processor 502 provides computing and control capabilities to support the operation of the entire computer device 500.

[0150] The internal memory 504 provides an environment for the execution of the computer program 5032 in the non-volatile storage medium 503. When the computer program 5032 is executed by the processor 502, the processor 502 can execute a method compatible with both post-quantum and traditional public keys.

[0151] The network interface 505 is used for network communication with other devices. Those skilled in the art will understand that the above structure is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device 500 to which the present application is applied. A specific computer device 500 may include more or fewer components than shown in the figures, or combine certain components, or have different component arrangements.

[0152] The processor 502 is used to run a computer program 5032 stored in the memory to perform the following steps:

[0153] Generate a trusted certificate, which includes additional public key information extension, additional signature algorithm extension, and additional signature value extension. The additional public key information extension is used to store the public key information of the post-quantum cryptography algorithm, the additional signature algorithm extension is used to store the post-quantum signature algorithm identifier, and the additional signature value extension is used to store the certificate signature value of the post-quantum cryptography algorithm.

[0154] When verifying the trusted credential, it is determined whether the verification system supports post-quantum cryptography algorithms;

[0155] If the verification system does not support post-quantum cryptography, verify the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential;

[0156] If the verification system supports post-quantum cryptography, it verifies the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential, and verifies the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, additional signature algorithm extension, and additional signature value extension.

[0157] In some preferred embodiments, generating trusted credentials includes:

[0158] The certificate applicant generates a first key pair for the conventional cryptographic algorithm and a second key pair for the post-quantum cryptographic algorithm. The first key pair includes a first public key and a first private key, and the second key pair includes a second public key and a second private key.

[0159] The certificate applicant submits a certificate application to the certificate authority, the certificate application including the first public key and the second public key;

[0160] After the certificate applicant's identity is verified, the certificate authority generates the certificate signature value of the traditional cryptographic algorithm and the certificate signature value of the post-quantum cryptographic algorithm.

[0161] The certificate authority generates the trusted credential based on the certificate signature value of the traditional cryptographic algorithm and the certificate signature value of the post-quantum cryptographic algorithm, and sends the trusted credential to the certificate applicant.

[0162] In some preferred embodiments, verifying the certificate signature value of the preset conventional cryptographic algorithm in the trusted credential includes:

[0163] Extract the first public key from the trusted credential;

[0164] Verify the certificate chain of the trusted credential;

[0165] If the certificate chain verification of the trusted credential passes, the certificate signature value of the traditional cryptographic algorithm is verified using the first public key.

[0166] In some preferred embodiments, verifying the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, the additional signature algorithm extension, and the additional signature value extension includes:

[0167] Extract the second public key from the trusted credential;

[0168] The identifier of the post-quantum signature algorithm is verified;

[0169] If the post-quantum signature algorithm identifier verification passes, the certificate signature value of the post-quantum cryptography algorithm is verified using the second public key.

[0170] In some preferred embodiments, the method further includes:

[0171] If the verification system does not support post-quantum cryptography, the verification result of the traditional cryptography algorithm shall be used to determine whether the trusted credential has been verified.

[0172] If the verification system supports post-quantum cryptography, then the system determines whether the trusted credential passes verification based on the preset verification strategy and the verification results of the traditional cryptography algorithm and the post-quantum cryptography algorithm.

[0173] In some preferred embodiments, determining whether the trusted credential passes verification based on a preset verification strategy and the verification results of the traditional cryptographic algorithm and the post-quantum cryptographic algorithm includes:

[0174] If the verification strategy is in strict mode, the trusted credential is deemed to have passed verification when both the traditional cryptographic algorithm and the post-quantum cryptographic algorithm pass the verification.

[0175] If the verification strategy is traditional priority, the trusted credential is deemed to have passed verification when the verification result of the traditional cryptographic algorithm is successful.

[0176] If the verification strategy is post-quantum priority, the trusted credential is deemed to have passed verification when the verification result of the post-quantum cryptographic algorithm is successful.

[0177] In some preferred embodiments, the method further includes:

[0178] If the conventional cryptographic algorithm and / or the post-quantum cryptographic algorithm are updated, the trusted credential is regenerated.

[0179] It should be understood that in the embodiments of this application, the processor 502 may be a central processing unit (CPU), or it may be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor.

[0180] It will be understood by those skilled in the art that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program may be stored in a storage medium, which is a computer-readable storage medium. The computer program is executed by at least one processor in the computer system to implement the process steps of the embodiments of the above methods.

[0181] Therefore, the present invention also provides a storage medium. This storage medium can be a computer-readable storage medium. The storage medium stores a computer program. When executed by a processor, the computer program causes the processor to perform the following steps:

[0182] Generate a trusted certificate, which includes additional public key information extension, additional signature algorithm extension, and additional signature value extension. The additional public key information extension is used to store the public key information of the post-quantum cryptography algorithm, the additional signature algorithm extension is used to store the post-quantum signature algorithm identifier, and the additional signature value extension is used to store the certificate signature value of the post-quantum cryptography algorithm.

[0183] When verifying the trusted credential, it is determined whether the verification system supports post-quantum cryptography algorithms;

[0184] If the verification system does not support post-quantum cryptography, verify the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential;

[0185] If the verification system supports post-quantum cryptography, it verifies the certificate signature value of the traditional cryptographic algorithm preset in the trusted credential, and verifies the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, additional signature algorithm extension, and additional signature value extension.

[0186] In some preferred embodiments, generating trusted credentials includes:

[0187] The certificate applicant generates a first key pair for the conventional cryptographic algorithm and a second key pair for the post-quantum cryptographic algorithm. The first key pair includes a first public key and a first private key, and the second key pair includes a second public key and a second private key.

[0188] The certificate applicant submits a certificate application to the certificate authority, the certificate application including the first public key and the second public key;

[0189] After the certificate applicant's identity is verified, the certificate authority generates the certificate signature value of the traditional cryptographic algorithm and the certificate signature value of the post-quantum cryptographic algorithm.

[0190] The certificate authority generates the trusted credential based on the certificate signature value of the traditional cryptographic algorithm and the certificate signature value of the post-quantum cryptographic algorithm, and sends the trusted credential to the certificate applicant.

[0191] In some preferred embodiments, verifying the certificate signature value of the preset conventional cryptographic algorithm in the trusted credential includes:

[0192] Extract the first public key from the trusted credential;

[0193] Verify the certificate chain of the trusted credential;

[0194] If the certificate chain verification of the trusted credential passes, the certificate signature value of the traditional cryptographic algorithm is verified using the first public key.

[0195] In some preferred embodiments, verifying the certificate signature value of the post-quantum cryptography algorithm based on the additional public key information extension, the additional signature algorithm extension, and the additional signature value extension includes:

[0196] Extract the second public key from the trusted credential;

[0197] The identifier of the post-quantum signature algorithm is verified;

[0198] If the post-quantum signature algorithm identifier verification passes, the certificate signature value of the post-quantum cryptography algorithm is verified using the second public key.

[0199] In some preferred embodiments, the method further includes:

[0200] If the verification system does not support post-quantum cryptography, the verification result of the traditional cryptography algorithm shall be used to determine whether the trusted credential has been verified.

[0201] If the verification system supports post-quantum cryptography, then the system determines whether the trusted credential passes verification based on the preset verification strategy and the verification results of the traditional cryptography algorithm and the post-quantum cryptography algorithm.

[0202] In some preferred embodiments, determining whether the trusted credential passes verification based on a preset verification strategy and the verification results of the traditional cryptographic algorithm and the post-quantum cryptographic algorithm includes:

[0203] If the verification strategy is in strict mode, the trusted credential is deemed to have passed verification when both the traditional cryptographic algorithm and the post-quantum cryptographic algorithm pass the verification.

[0204] If the verification strategy is traditional priority, the trusted credential is deemed to have passed verification when the verification result of the traditional cryptographic algorithm is successful.

[0205] If the verification strategy is post-quantum priority, the trusted credential is deemed to have passed verification when the verification result of the post-quantum cryptographic algorithm is successful.

[0206] In some preferred embodiments, the method further includes:

[0207] If the conventional cryptographic algorithm and / or the post-quantum cryptographic algorithm are updated, the trusted credential is regenerated.

[0208] The storage medium is a physical, non-transient storage medium, such as a USB flash drive, external hard drive, read-only memory (ROM), magnetic disk, or optical disk, or any other physical storage medium capable of storing program code. The computer-readable storage medium can be non-volatile or volatile.

[0209] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this invention.

[0210] In the several embodiments provided by this invention, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative. For example, the division of each unit is merely a logical functional division, and there may be other division methods in actual implementation. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed.

[0211] The steps in the method of this invention can be adjusted, merged, or reduced in order according to actual needs. The units in the device of this invention can be merged, divided, or reduced according to actual needs. Furthermore, the functional units in the various embodiments of this invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0212] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, a terminal, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention.

[0213] In the above embodiments, the descriptions of each embodiment have different focuses. For parts that are not described in detail in a certain embodiment, please refer to the relevant descriptions in other embodiments.

[0214] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Since these modifications and variations fall within the scope of the claims and their equivalents, this invention also intends to include these modifications and variations.

[0215] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in the present invention, and these modifications or substitutions should all be covered within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A method of being compatible with post-quantum and legacy public keys, characterized in that, The method comprises the following steps: generating a trusted certificate, wherein the trusted certificate comprises an additional public key information extension, an additional signature algorithm extension and an additional signature value extension, the additional public key information extension is used to store public key information of a post-quantum cryptographic algorithm, the additional signature algorithm extension is used to store a post-quantum signature algorithm identifier, and the additional signature value extension is used to store a certificate signature value of the post-quantum cryptographic algorithm; when verifying the trusted certificate, determining whether a verification system supports the post-quantum cryptographic algorithm; if the verification system does not support the post-quantum cryptographic algorithm, verifying a certificate signature value of a conventional cryptographic algorithm in the trusted certificate; if the verification system supports the post-quantum cryptographic algorithm, verifying the certificate signature value of the conventional cryptographic algorithm in the trusted certificate, and verifying the certificate signature value of the post-quantum cryptographic algorithm based on the additional public key information extension, the additional signature algorithm extension and the additional signature value extension.

2. The method of claim 1, wherein, The method for generating the trusted certificate comprises the following steps: generating, by a certificate applicant, a first key pair of the conventional cryptographic algorithm and a second key pair of the post-quantum cryptographic algorithm, wherein the first key pair comprises a first public key and a first private key, and the second key pair comprises a second public key and a second private key; submitting, by the certificate applicant, a certificate application to a certificate authority, wherein the certificate application comprises the first public key and the second public key; generating, by the certificate authority, a certificate signature value of the conventional cryptographic algorithm and a certificate signature value of the post-quantum cryptographic algorithm after verifying the identity of the certificate applicant; generating, by the certificate authority, the trusted certificate based on the certificate signature value of the conventional cryptographic algorithm and the certificate signature value of the post-quantum cryptographic algorithm, and sending the trusted certificate to the certificate applicant.

3. The method of claim 2, wherein, The method for verifying the certificate signature value of the conventional cryptographic algorithm in the trusted certificate comprises the following steps: extracting the first public key from the trusted certificate; verifying a certificate chain of the trusted certificate; if the certificate chain of the trusted certificate is verified, verifying the certificate signature value of the conventional cryptographic algorithm by using the first public key.

4. The method of claim 2, wherein, The method for verifying the certificate signature value of the post-quantum cryptographic algorithm based on the additional public key information extension, the additional signature algorithm extension and the additional signature value extension comprises the following steps: extracting the second public key from the trusted certificate; checking the post-quantum signature algorithm identifier; if the post-quantum signature algorithm identifier is checked, verifying the certificate signature value of the post-quantum cryptographic algorithm by using the second public key.

5. The method of claim 4, wherein, The method further comprises the following steps: if the verification system does not support the post-quantum cryptographic algorithm, determining whether the trusted certificate is verified based on a verification result of the conventional cryptographic algorithm; if the verification system supports the post-quantum cryptographic algorithm, determining whether the trusted certificate is verified based on a preset verification strategy and the verification results of the conventional cryptographic algorithm and the post-quantum cryptographic algorithm.

6. The method of claim 5, wherein, The method for determining whether the trusted certificate is verified based on the preset verification strategy and the verification results of the conventional cryptographic algorithm and the post-quantum cryptographic algorithm comprises the following steps: If the verification policy is the strict mode, when the verification results of the traditional cryptographic algorithm and the post-quantum cryptographic algorithm are both passed, it is determined that the trusted credential is passed verification; If the verification policy is the traditional priority, when the verification result of the traditional cryptographic algorithm is passed, it is determined that the trusted credential is passed verification; If the verification policy is the post-quantum priority, when the verification result of the post-quantum cryptographic algorithm is passed, it is determined that the trusted credential is passed verification.

7. The method of claim 2, wherein, The method further comprises: If the traditional cryptographic algorithm and / or the post-quantum cryptographic algorithm is updated, the trusted credential is regenerated.

8. A device compatible with both post-quantum and traditional public-key cryptography, characterized in that, The device comprises units for performing the method according to any one of claims 1-7.

9. A computer device, comprising: The computer device comprises a memory and a processor, the memory stores a computer program, and the processor implements the method according to any one of claims 1-7 when executing the computer program.

10. A computer-readable storage medium, characterized in that, The storage medium stores a computer program, and the computer program can implement the method according to any one of claims 1-7 when executed by a processor.

Images