基于SM2与SM4签密的可验证秘密共享方案  

Verifiable secret sharing scheme based on SM2 and SM4 signcryption

作　　者：高岩[1] 黄成杭 梁佐泉 冯四风 GAO Yan;HUANG Chenghang;LIANG Zuoquan;FENG Sifeng(College of Computer Science and Technology,Henan Polytechnic University,Jiaozuo454000,Henan,China;Puhua Trust Information Technology Limited Company,Shanghai 201499,China)

机构地区：[1]河南理工大学计算机科学与技术学院,河南焦作454000 [2]普华诚信信息技术有限公司,上海201499

出　　处：《河南理工大学学报（自然科学版）》2022年第5期146-152,共7页Journal of Henan Polytechnic University（Natural Science）

基　　金：国家重点研发计划项目(2017YFB08002103)。

摘　　要：经典的Shamir秘密共享方案,部分参与者提供无效的子秘密导致秘密重构失败,为此,设计一种基于SM2与SM4签密的可验证秘密共享方案。分发者将秘密拆分为n个子秘密,然后使用SM2与SM4签密方案对子秘密进行签密,生成的n个签密数据依次分发给n个参与者;当需要恢复原始秘密时,任意t个参与者参与秘密重构可以恢复原始秘密,重构前先对参与者的签密数据进行解签密,验证失败则拒绝重构;解密得到的t个子秘密可以重构恢复原始秘密。方案可以根据实际需要动态设置门限值t和参与者n的取值。仿真实验验证了方案的正确性、安全性和不可伪造性。In classic Shamir-(t,n)secret sharing scheme,some participants provided invalid sub-secrets,which led to the failure of secret reconstruction and security risks.Therefore,a verifiable secret sharing scheme based on SM2 and SM4 signcryption was designed in this paper.The distributor divided the secret into n sub-secrets,then SM2 and SM4 signcryption schemes were used to signcrypt the sub-secrets.The generated n signcryption data were distributed to n participants successively.When the original secret was needed to be restored,any t participants participated in secret reconstruction could recover the original secret,but before reconstruction,the signcryption data of participants should be decrypted and verified,if the validation failed,the scheme would reject the reconstruction.The decrypted t sub-secrets could be reconstructed to recover the original secret.The scheme could dynamically set the threshold value t and the value of participant n according to the actual needs.The correctness,security and unforgeability of the scheme were proved by simulation experiments.

关 键 词：Shamir秘密共享 SM2与SM4签密 可验证性 秘密重构 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]