基于国密SM2算法的证书透明日志系统设计

Design of Certificate Transparency Log System Based on SM2 Algorithm

证书透明日志系统具有广泛应用前景,但当前的证书透明日志系统多采用存在一定局限性的RSA算法和ECC算法,且无法识别基于国密算法的SSL证书。文章提出了一种基于国密SM2算法的证书透明日志系统设计方法,采用SM2算法生成日志系统签名密钥和数字签名证书透明日志数据,采用SM3算法作为系统的摘要算法来计算日志签名数据的哈希值,实现支持国密SSL证书的证书透明日志系统,用于保障国密SSL证书的安全可信。

The certificate transparency log system is an important mechanism for ensuring the security of digital certificates and addressing malicious issuances.The local encryption algorithm,SM2,which is independently developed in our country and has become an international standard,has a wide range of potential applications in the field of digital certificates.However,the current certificate transparency log systems mostly rely on RSA,ECC and they cannot recognize SSL certificates based on the SM2 algorithm.In this paper,a design method for a certificate transparency log system based on the SM2 algorithm is proposed.The system utilized the SM2 algorithm to generate the log system's signature key and to digitally sign the certificate transparency log data and the SM3 algorithm was used as the digest algorithm required by the system to calculate the hash value.This implementation enables the support of SM2 SSL certificates in the certificate transparency log system,thereby ensuring the security and trustworthiness of these SM2 SSL certificates.