基于SM2的无证书加密算法

无证书密码系统中无需证书来管理公钥,同时没有标识密码系统中的密钥委托功能.本文描述一种基于SM2加密算法构造的无证书加密算法,并在随机谕示和代数群模型下证明其安全性可以规约到Gap-Diffie-Hellman复杂性假设.因此构造的算法具有可证明安全性,并可基于已有SM2算法部件快速部署等优势.采用该算法的密码系统具有简洁的密钥管理、高效的算法实现,非常适合物联网等需要轻量级公钥算法的应用场景.

Certificateless Public Key Encryption Based on SM2

A system based on certificateless public key cryptography(CL-PKC) has succinct public key management without using certificates, and can exclude the key-escrow feature inherent in the identity-based cryptosystem. This paper presents a certificateless public encryption(CL-PKE) based on the SM2 encryption algorithm. The security of the proposed scheme is proved based on the GapDiffie-Hellman assumption in the random oracle and algebraic group model. Hence, the scheme has provable security and can be deployed based on existing SM2 infrastructure. It offers clear advantages in those systems such as IoT, which require lightweight public key algorithms.