一种抗替换攻击的SM2签名算法  

An SM2 signature algorithm resistant to substitution attacks

作　　者：严都力 薛李波 杨龑栋 刘翼[1] 延照耀 YAN Duli;XUE Libo;YANG Yandong;LIU Yi;YAN Zhaoyao(College of Methematics and Computer Science,Yan’an University;School of Petroleum Engineering and Environmental Engineering,Yan’an University,Yan’an 716000,China)

机构地区：[1]延安大学数学与计算机科学学院 [2]延安大学石油与环境工程学院,陕西延安716000

出　　处：《延安大学学报（自然科学版）》2023年第4期104-111,共8页Journal of Yan'an University：Natural Science Edition

基　　金：国家自然科学基金资助项目(61962059);陕西省教育厅自然科学专项(22JK0622,23JK0736);延安市科技计划项目(2022SLGYGG-007);陕西省大学生创新创业训练计划项目(S202210719099);延安大学大学生创新创业训练计划项目(D2021160)。

摘　　要：首先简要回顾了SM2签名算法遭受的替换攻击;然后,利用哈希函数将签名私钥、签名消息与签名随机数的哈希结果作为签名的随机组件,对原始的SM2签名算法进行改进,构造具备抗替换攻击性的SM2签名方案,并在一般群模型下证明了方案的安全性;最后,对提出的抗替换攻击SM2签名算法与原始SM2签名算法进行效率测试,实验结果证明了提出的算法在计算复杂度与算法执行效率方面结果基本一致。该签名算法的研究不仅有效的抵御了替换攻击带来的安全威胁,而且丰富了国产密码体系。Firstly,this paper briefly reviews the substitution attacks of SM2 signature algorithm.Then,hash function was used to take the hash result of signature private key,signature message and signature random number as the random components of signature,and the original SM2 signature algorithm was improved to construct SM2 signature scheme with anti-substitution attack,and the security of the scheme was proved under the general group model.Finally,the efficiency test of the proposed SM2 signature algorithm against substitution attacks and the original SM2 signature algorithm was carried out.The results showed that the proposed algorithm had the same effect in computational complexity and execution efficiency.The research on this signature algorithm not only effectively resists the security threats brought by substitution attacks,but also enrichis the domestic cryptosystem.

关 键 词：SM2签名算法 替换攻击 一般群模型 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]