基于SM9算法的邮件加密系统设计

doi:10.3969/j.issn.1671-1122.2022.06.006

信息网络安全 ›› 2022, Vol. 22 ›› Issue (6): 53-60.doi: 10.3969/j.issn.1671-1122.2022.06.006

基于SM9算法的邮件加密系统设计

王圣雯¹, 胡爱群²()

1.东南大学网络空间安全学院,南京 211189
2.东南大学信息科学与工程学院,南京 211189

收稿日期:2021-07-07 出版日期:2022-06-10 发布日期:2022-06-30
通讯作者: 胡爱群 E-mail:aqhu@seu.edu.cn
作者简介:王圣雯（1998—）,男,黑龙江,硕士研究生,主要研究方向为密码学、物理层安全|胡爱群（1966—）,男,江苏,教授,博士,主要研究方向为无线网络安全、物理层安全技术
基金资助:
2020年江苏省创新能力建设专项资金(BM2003201)

Design of E-mail Encryption System Based on SM9 Algorithm

WANG Shengwen¹, HU Aiqun²()

1. School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China
2. School of Information Science and Engineering, Southeast University, Nanjing 211189, China

Received:2021-07-07 Online:2022-06-10 Published:2022-06-30
Contact: HU Aiqun E-mail:aqhu@seu.edu.cn

摘要/Abstract

摘要：

近年来,邮箱泄露、邮件泄密等问题层出不穷,造成了十分恶劣的影响。为解决邮件传输时的安全问题,文章根据我国国家密码标准设计了一种基于SM9算法的邮件加密系统。该系统由密钥生成与密钥分发、邮件加/解密、邮件签名、密钥交换4部分组成,可实现邮件加密传输、邮件完整性验证、邮件签名、密钥协商等功能,有效保证了邮件在传输过程中的安全。该邮件加密系统解决了传统邮件加密体系中密钥欺骗和中间人攻击等问题,保证了公钥真实可靠,比传统邮件加密系统更具优势。

关键词: 邮件系统, 非对称加密, SM9算法, 基于身份的加密

Abstract:

In recent years, problems such as email leaks have emerged one after another, which have caused a very bad impact. In order to solve the security problem during mail transmission, this paper designed a mail encryption system based on SM9 algorithm according to the national encryption standard of China. The system consisted of four parts: key generation and key distribution, email encryption and decryption, email signature, and key exchange. It could realize the email encryption transmission, email integrity verification, email signature, and key negotiation, etc. It effectively ensured the security of the mail during the transmission process. The email encryption system solved the problems of key spoofing and man-in-the-middle attacks in the traditional email encryption system, and ensured the authenticity and reliability of the public key. It had advantages over traditional email encryption systems.

Key words: E-mail system, asymmetric encryption, SM9 algorithm, identity-based encryption

中图分类号:

TP309

王圣雯, 胡爱群. 基于SM9算法的邮件加密系统设计[J]. 信息网络安全, 2022, 22(6): 53-60.

WANG Shengwen, HU Aiqun. Design of E-mail Encryption System Based on SM9 Algorithm[J]. Netinfo Security, 2022, 22(6): 53-60.

图/表 12

图1

图2

图3

图4

图5

图6

图7

图8

图9

图10

图11

图12

参考文献 16

[1]	GUPTA S, GUPTA V. Revocable Key Identity Based Cryptography without Key Escrow Problem[C]// IEEE. 2016 International Conference on Computing, Communication and Automation(ICCCA). New York:IEEE, 2016: 443-448.
[2]	SHAMIR A. Identity-Based Cryptosystems and Signature Schemes[C]// Springer. CRYPTO 1984 on Advances in Cryptology. Heidelberg: Springer, 1984: 47-53.
[3]	SONG Fei, SHIYuanbing, HUANGMinghao. A Method of Industrial Internet Entity Mutual Trust Combining PKI and IBE Technology System[C]// IEEE. 2020 3rd International Conference on Artificial Intelligence and Big Data(ICAIBD). New York:IEEE, 2020: 304-308.
[4]	TANAKA H. A Realization Schemes for the Identity-Based Cryptosystems[C]// Springer. Conference on the Theory and Application of Cryptographic Techniques. Heidelberg: Springer, 1987: 341-349.
[5]	TSUJII S, ITOH T. An ID-Based Cryptosystem Based on the Discrete Logarithm Problem[J]. IEEE Journal on Selected Areas in Communications, 1989, 7(4): 467-473. doi: 10.1109/49.17709 URL
[6]	BONEH D, FRANKLIN M. Identity-Based Encryption from the Weil Pairing[C]// Springer. 21st Auunal International Cryptology Conference on Advances in Cryptology. Heidelberg: Springer, 2001: 213-229.
[7]	HORWITZ J, LYNN B. Towards Hierarchical Identity-Based Encryption[C]// Springer. International Conference on the Theory and Applications of Cryptographic Techniques. Heidelberg: Springer, 2002: 466-481.
[8]	GENTRY C, SILVERBERG A. Hierarchical ID-Based Cryptography[J]. Advances in Cryptology-Asiacrypt, 2002, 82(4): 548-566.
[9]	WATERS B R. Efficient Identity-Based Encryption without Random Oracles[C]// Springer. 24th Annual International Conference on Theory and Applications of Cryptographic Techniques. Heidelberg: Springer, 2005: 114-127.
[10]	BONEH D, BOYEN X. Secure Identity Based Encryption without Random Oracles[C]// Springer. Annual International Cryptology Conference. Heidelberg: Springer, 2004: 443-459.
[11]	NACCACHE D. Secure and Practical Identity-Based Encryption[J]. IET Information Security, 2007, 1(2): 59-64. doi: 10.1049/iet-ifs:20055097 URL
[12]	BONEH D, BOYEN X. Anonymous Hierarchical Identity-Based Encryption(Without Random Oracles)[C]// Springer. International Conference on Advances in Cryptology. Heidelberg: Springer, 2006: 290-307.
[13]	BONEH D, GENTRY C, HAMBURG M. Space-Efficient Identity Based Encryption without Pairings[C]// IEEE. 48th Annual IEEE Symposium on Foundations of Computer Science. New York: IEEE, 2007: 647-657.
[14]	GB/T 38635. 1-2020 Information Security Technology-Identity-Based Cryptographic Algorithms SM9[S]. Beijing: Standards Press of China, 2020.
	GB/T 38635. 1-2020 信息安全技术 SM9标识密码算法[S]. 北京: 标准出版社, 2020.
[15]	BARRETO P, NAEHRIG M. Pairing-Friendly Elliptic Curves of Prime Order[C]// Springer. Selected Areas in Cryptography. Heidelberg: Springer, 2005: 319-331.
[16]	YUAN Feng, CHENG Chaohui. Overview on SM9 Identity-Based Cryptographic Algorithm[J]. Journal of Information Security Research, 2016, 2(11): 1008-1027.

基于SM9算法的邮件加密系统设计

Design of E-mail Encryption System Based on SM9 Algorithm

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 12

参考文献 16

相关文章 5

编辑推荐

Metrics

本文评价

[1]	刘嘉微, 马兆丰, 王姝爽, 罗守山. 基于区块链的隐私信用数据受限共享技术研究[J]. 信息网络安全, 2022, 22(5): 54-63.
[2]	张昱, 孙光民, 李煜. 基于SM9算法的移动互联网身份认证方案研究[J]. 信息网络安全, 2021, 21(4): 1-9.
[3]	张雪锋, 彭华. 一种基于SM9算法的盲签名方案研究[J]. 信息网络安全, 2019, 19(8): 61-67.
[4]	夏逸珉, 许春根, 窦本年. 一种标准模型下基于身份的匿名加密方案[J]. 信息网络安全, 2018, 18(4): 72-78.
[5]	刘锦刚, 董军武. 基于大整数分解的身份加密体制研究[J]. 信息网络安全, 2015, 15(10): 32-39.