The invention discloses an
Internet of Things device anti-
quantum password migration method based on a national cryptographic
algorithm, and relates to the field of
data security, the method comprises the following steps: configuring a Hash agility module taking a national cryptographic SM3 as a default
algorithm, and dynamically switching to an anti-
quantum or compatibility alternative
algorithm based on monitoring; carrying out identity
authentication and temporary key negotiation by adopting SM2, and generating a key pair only used for a
single session; deriving a
session key based on the key pair, and adopting a differential double-layer signature
verification mechanism according to the
data security level; for
firmware updating, a differential
package is generated through function level
differential analysis, and atomic updating and
rollback are achieved through A / B
system partition. According to the method,
quantum computing threats are effectively resisted, national
security compliance and forward security are ensured, the volume of an update
package is remarkably reduced through a resource optimization technology, memory occupation is reduced,
verification efficiency is improved, and the method is particularly suitable for resource-limited
Internet of Things equipment.