密钥管理服务系统下的多方协同SM4加/解密方案  

Multi-party Collaborative SM4 Encryption/Decryption Scheme in Key Management Service

作　　者：杨伊 何德彪 文义红 罗敏[1] YANG Yi;HE Debiao;WEN Yihong;LUO Min(School of Cyber Science and Engineering,Wuhan University,Wuhan 430072,China;The 54th Research Institute of CETC,Shijiazhuang 050000,China)

机构地区：[1]武汉大学国家网络安全学院,武汉430072 [2]中国电子科技集团有限公司第五十四研究所,石家庄050000

出　　处：《信息网络安全》2021年第8期17-25,共9页Netinfo Security

基　　金：国家重点研发计划[2018YFC1604000];国家自然科学基金[61932016,61972294]。

摘　　要：随着密码国产化与密钥保护需求的不断增加,商用密码算法与密钥安全管理的复合应用成为专家和学者关注的焦点之一。为解决加/解密方案中私钥易泄露的问题,针对密钥管理服务系统,文章提出一种安全高效的多方协同SM4加/解密方案。该方案利用一次一密且可以预计算的Beaver乘法三元组构成安全两方乘加转换器,保证多方S盒协同计算,从而实现安全高效的多方协同SM4加/解密,有效降低了在线交互过程中的计算开销与通信开销。安全性分析表明,文章方案在恶意模型下是安全的;其他性能分析详细统计了方案的计算开销与通信开销,表明方案是高效且适用于密钥管理服务系统的。With the increasing demand for cryptograph localization and key protection,the composite application of commercial cryptographic algorithm and key security management has become one of the focuses of experts and scholars.In order to solve the problem of easy key disclosure in encryption/decryption scheme,this paper proposes a secure and efficient multi-party collaborative SM4 encryption/decryption scheme for key management service(KMS)system.The scheme uses the Beaver’s triple,which can be calculated predicatively and once,to construct a secure two-party multiplication and addition converter to ensure multi-party S-box collaborative computing,so as to realize the secure and efficient multi-party collaborative SM4 encryption/decryption and effectively reduce the computation and communication costs in the process of online interaction.Security analysis shows that the proposed scheme is secure under the malicious model and the other performance analysis details the computation and communication costs of the proposed scheme,which show that the proposed scheme is efficient and suitable for KMS system.

关 键 词：密钥管理服务 SM4 多方协同 Beaver乘法三元组 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]