基于OpenSSL引擎机制的椭圆曲线数字签名方案研究  

Research on Elliptic Curve Digital Signature Scheme Based on OpenSSL Engine Mechanism

作　　者：刘建英 李洪涛 王波 LIU Jianying;LI Hongtao;WANG Bo(School of Mathematics and Computer Science,Shanxi Normal University,Taiyuan 030031,Shanxi,China)

机构地区：[1]山西师范大学数学与计算机科学学院,山西太原030031

出　　处：《山西师范大学学报（自然科学版）》2022年第3期45-51,共7页Journal of Shanxi Normal University(Natural Science Edition)

摘　　要：基于椭圆曲线公钥密码体制的数字签名机制与基于传统离散对数问题的数字签名机制相比,具有安全性高、密钥长度短、计算量小等优点.基于上述优点和安全性,国家密码管理局提出了SM2椭圆曲线算法和SM3算法,并在国内得到了广泛应用.但国际主流开源软件不支持国内SM2数字证书的生成、签名、验证等操作.免费的SM2数字证书难以验证和区分其真实性.针对上述问题,提出了一种基于OpenSSL引擎机制的椭圆曲线数字签名方案,实现了SM2椭圆曲线数字签名检查算法以及SM3算法,并通过OpenSSL引擎机制将其集成到开源软件OpenSSL中.最后,实现了SM2数字证书的制作、签名和校验功能.The digital signature mechanism based on elliptic curve public key cryptosystem has the advantages of higher security,shorter key size and less computational load than that based on the traditional discrete logarithm problem.Based on the above advantages and security,the cryptography algorithm SM2 elliptic curve algorithm and SM3 abstract algorithm introduced by National Cryptography Administration have been widely used in China.However,the international mainstream open source software does not support the generation,signing,verificating and other operations of domestic SM2 digital certificates.Free SM2 digital certificates are difficult to verify and distinguish the authenticity.To solve the above problems,this paper proposes an elliptic curve digital signature scheme based on OpenSSL engine mechanism,realizes SM3 abstract algorithm,SM2 elliptic curve digital signature check algorithm,and integrates it into open source software OpenSSL through OpenSSL engine mechanism.Finally,It realizes the functions of making,signing and checking SM2 digital certificate.

关 键 词：OpenSSL引擎 椭圆曲线 数字签名 SM2 SM3 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]