隐式证书的国密算法应用研究

Research on the Application of SM Algorithms of Implicit Certificate

随着5G技术的发展,万物互联成为当今科技领域的主流发展方向。在物联网设备节点日益增加的同时,物联网的安全认证问题变得更加重要。近几年,物联网领域的安全问题频出,大量的微型物联网设备缺乏网络认证机制。相较于传统的认证方案,对于物联网设备而言,隐式证书方案在内存占用和计算量上更符合内存和计算资源受限的物联网应用环境。文章基于SM2、SM3国密算法,设计了一种国密隐式证书的方案,利用OpenSSL实现了国密隐式证书颁发、签名和验签的功能,并将传统数字证书与国密隐式证书方案进行对比。实验显示文章方案在验签耗时上明显优于传统的数字证书。

With the development of 5G technology,Internet of Everything has become the mainstream development direction in today's science and technology field.With the increasing number of device nodes in Internet of Thing,the security authentication of the Internet of Things becomes more and more important.In recent years,there have been frequent security problems in the field of Internet of Things,a large number of micro IoT devices have no corresponding authentication mechanism.For IoT devices,compared with traditional authentication schemes,implicit certificate schemes are more suitable for memory resource-constrained application environments in terms of computation.Based on SM2 and SM3,this paper designs an implicit certificate scheme,and uses OpenSSL to implement the functions of issuing,signing and verifying the implicit certificate.At the same time,based on the implementation of traditional digital certificate scheme and SM algorithms implicit certificate scheme,this paper carries out performance test and analysis and comparison on the same platform,the results show that the proposed scheme is significantly better than the traditional scheme on the verification in terms of time consumption.