The invention discloses a verifiable encrypted
certificate issuing method and
system based on zero-knowledge proof, and relates to the technical field of cryptology and
information security. The method comprises the following steps: acquiring a user
encryption key generation request sent by a CA
authentication center, and analyzing the user
encryption key generation request to obtain a user signature public key; generating a user
encryption private key, and obtaining a user encryption public key based on the user encryption private key; based on the user signature public key,
verifiable encryption is executed on the user encryption private key, a
verifiable encryption result is generated, and the
verifiable encryption result comprises a user encryption private key verifiable
ciphertext and zero-knowledge proof; and sending the verifiable encryption result, the user signature public key and the user encryption public key to a CA
authentication center. According to the scheme provided by the invention, the certification is held by the verifiable encryption instead of the traditional encryption key, so that the communication round between the user and the CA is simplified, and the
certificate issuing efficiency is improved; and the method does not depend on signature operation, so that the problem that an encryption key cannot be signed in anti-
quantum cryptography is solved.