The application discloses a SSL VPN security gateway communication method fusing post-
quantum cryptography technology, and comprises the following steps: S1, a
client and a
server are respectively configured with a series-connection
mixed type signature digital
certificate, a series-connection
mixed type encryption digital
certificate and corresponding PQC
encryption key pair private keys, PQC signature key pair private keys, SM2
encryption key pair private keys and SM2 signature key pair private keys, wherein the series-connection
mixed type signature digital
certificate and the series-connection mixed type encryption digital certificate contain SM2 algorithms and PQC algorithms; S2, a mixed
algorithm cipher suite using the SM2
algorithm and the PQC
algorithm is added in a
cipher suite
list of the
client and the priority thereof is forced to be on top; S3, a
message structure in a
handshake protocol is reformed to use the series-connection mixed type encryption digital certificate to realize anti-
quantum key negotiation by adding the PQC algorithm
processing on the basis of the original national secret algorithm. According to the application, the PQC algorithm is added on the basis of the original national secret algorithm and the
handshake protocol is reformed, so that anti-
quantum attack key negotiation and identity
authentication can be realized, the communication security is obviously improved, and meanwhile, the
interoperability with the standard SSL VPN is maintained.