An open source component national secret issuing method and system based on independent signature list and a storage medium

Abstract

The application discloses an open source component national secret issuing method and system based on independent signature list and a storage medium. The method comprises the following steps: calculating an SM3 digest of an original product, constructing and normalizing a signature load according to the SM3 digest and a signature record identifier, performing signature by adopting SM3 with SM2, and generating an independent complete signature list byte; persisting the complete signature list byte into a signature record in a preliminary state, and publishing the original product and the signature list; when the publishing fails, the complete signature list byte which has been persisted is reused to republish; after the publishing succeeds, the read-back signature list is subjected to SM3 digest consistency check, and after the check passes, an atomic activation transaction is executed, so that the signature record takes effect and the original product is switched to a downloadable state, so that the same signature record corresponds to a unique complete signature list byte in the issuing state flow process.