基于SM9算法的无证书密码机制  

Certificateless Cryptosystems Based on SM9 Algorithm

作　　者：李愿军 付跃军 刘冰 LI Yuan-Jun;FU Yue-Jun;LIU Bing(China Tobacco Guizhou Industrial Co.,Ltd.,Guiyang Guizhou 550001,China)

机构地区：[1]贵州中烟工业有限责任公司,贵州贵阳550001

出　　处：《机电产品开发与创新》2022年第3期43-47,共5页Development & Innovation of Machinery & Electrical Products

摘　　要：SM9算法是一类基于标识加密(IBC,Identity-Based Cryptography)的公钥密码体制,简化传统公钥基础设施PKI中证书的管理工作。但是由于用户的私钥由KGC(Key Generation Center)生成,系统的安全完全依赖于KGC,因此IBC机制的密钥托管问题严重影响了系统安全。业界常用多个KGC的门限密码技术方式来解决问题,这种分布式的解决方案带来了额外的基础设施和通信带宽的消耗及性能的损耗。本方案基于SM9算法提出一种无证书密码方案,可以有效的解决密钥托管问题,而不需要消耗额外的设备和带来计算性能的损耗,且与标准的SM9算法兼容。SM9 algorithm is a public key cryptosystem based on identity encryption,which simplifies the management of certificates in PKI.Since the user's private key is generated by KGC,the security of the system is completely dependent on KGC,so the key escrow problem of IBC mechanism seriously affects the security of the system.Multiple KGC threshold cryptography is often used to solve the problem.This distributed solution brings additional infrastructure and communication bandwidth consumption and performance loss.This scheme proposes a certificateless cryptographic scheme based on SM9 algorithm,which can effectively solve the key escrow problem without consuming additional equipment and resulting in computational performance loss,and is compatible with the standard SM9 algorithm.

关 键 词：无证书公钥密码 SM9 密钥托管 

分 类 号：TP29[自动化与计算机技术—检测技术与自动化装置]