面向Web3的SM2私钥保护方案  

Private Key Protected SM2 Scheme for Web3

作　　者：张福泰 张杰 ZHANG Fu-Tai;ZHANG Jie(School of Computer and Cyber Security,Fujian Normal University,Fuzhou 350117,China;Fujian Provincial Key Lab of Network Security&Cryptology(Fujian Normal University),Fuzhou 350117,China;School of Advanced Technology,Xi’an Jiaotong Liverpool University,Suzhou 215123,China)

机构地区：[1]福建师范大学计算机与网络空间安全学院,福建福州350117 [2]福建省网络安全与密码技术重点实验室(福建师范大学),福建福州350117 [3]西交利物浦大学智能工程学院,江苏苏州215123

出　　处：《软件学报》2024年第12期5621-5635,共15页Journal of Software

基　　金：国家自然科学基金(62002296,62172096);西交利物浦大学研究发展基金(RDF-21-02-014)。

摘　　要：为解决用户私钥安全问题,将秘密共享方法与边缘计算模式相结合,提出一种面向用户的、实用的私钥保护框架,并基于此框架设计针对国密SM2公钥密码的私钥保护方案,将用户的SM2私钥通过秘密共享分成两个私钥份额,分别由用户设备和边缘服务器持有.当用户使用Web3应用服务需要执行公钥密码算法时,用户设备和边缘服务器利用各自的私钥份额协同执行两方分布式SM2公钥密码算法,在无需恢复原始私钥的情况下完成密码运算.当用户设备或边缘服务器之一遭到攻击后,用户通过份额更新算法更新私钥份额,从而使存在泄漏风险的份额失效.实验测试结果表明,新方案的计算时长在现实环境中常用设备(手机、笔记本电脑)可接受的范围内.To solve the problems of users’private key security,this study proposes a user-oriented and practical private key protection framework by combining secret sharing and edge computing mode.Based on this framework,it designs a private key protection scheme for the SM2 public-key cryptographic system.In this scheme,a user’s SM2 private key is divided into two shares via a secret sharing scheme and kept by the user’s device and the edge server respectively.The public-key cryptographic task requested by Web3 applications is executed cooperatively by the user’s device and the edge server without having to recover the original private key.After the user’s device or the edge server is attacked,a key updating protocol will be executed among them to update the private key shares and scrap the one that may have been leaked.Experiment results show that the computing time of the new scheme is acceptable for common devices(smartphones,laptops,etc.)in the real world.

关 键 词：泄漏容忍 私钥保护 密钥管理 SM2 边缘计算 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]