The invention discloses a secret
key recovery method of an SM2 signature
algorithm based on lattice
attack and a storage medium, and the secret
key recovery method comprises the steps: S1, constructing a hidden number problem; s2, reducing the implicit number problem to a bounded distance decoding problem; s3, reducing a bounded distance decoding problem to a unique shortest vector problem; and S4, solving a unique shortest vector problem by adopting a
screening algorithm with predicates, and recovering the implicit number to obtain a signature private key. According to the method, the problem of recovering a key d by an SM2 signature
algorithm is reduced to a hidden number problem on the basis of bit information of the highest 1 (1 > = 2) bit of a random number obtained by
side channel attack, then the hidden number problem is reduced to a bounded distance decoding problem, and the problem is further reduced to a unique shortest vector problem for solving through a Kannan embedding technology, so that the problem is solved; and finally, constructing a more efficient
screening algorithm with predicates in combination with a small
index test technology to solve a unique shortest vector problem, recovering implicit numbers, and obtaining a signature private key. According to the new method provided by the invention, the lattice
attack overhead can be reduced, and the
key recovery efficiency is improved.