一种基于SM9算法的环签名方案

A ring signature scheme based on SM9 algorithm

为了避免传统公钥体制下复杂的用户数字证书管理,提出一种基于SM9算法的环签名方案。将环内签名者的身份标识信息发送到密钥生成中心,生成相应的私钥,私钥结合SM9签名生成算法对数据生成数字签名;环中验证者使用签名者的标识信息生成签名者的公钥,再利用SM9签名验证算法对公钥验证签名的正确性及可靠性。安全分析结果表明,该方案具有不可伪造性,保证了用户的匿名性及前向安全性;对比实验结果表明,该方案具有较高的运算效率。

In order to avoid the complicated user digital certificate management in the traditional public key system,a ring signature scheme based on SM9 algorithm is proposed.In this scheme,the identity information of the signer in the ring is sent to the key generation center to generate the corresponding private key,which is then used in combination with the SM9 signature generation algorithm to generate a digital signature on the data.The signer’s identity information is then used by the verifier in the ring to generate the signer’s public key,through which the SM9 signature verification algorithm is then used to verify the correctness and reliability of the signature.Security analysis results show that the scheme is unforgeable and can guarantee the anonymity and forward security of the user.Comparison experimental results show that the scheme has high computing efficiency.