Password reverse firewall method suitable for digital signature

Abstract

The invention discloses a password reverse firewall method suitable for a digital signature, and belongs to the technical field of information security. The method comprises the following steps: firstly, setting a transparent and credible password reverse firewall at a signature party, and setting related system parameters; when the password reverse firewall receives the parameters, resetting partof the parameters and then forwarding to the signature party; the signature party signing the message based on the received parameters to obtain a signature result and transmitting the signature result to a password reverse firewall of the signature party, and the password reverse firewall resetting part of sub-signatures in the signature result and then transmitting the sub-signatures to the verification party; and the verification party carrying out verification processing on the received signature, verifying a legal signature about the message, outputting acceptance if the verification ispassed, and outputting rejection if the verification is not passed. The arrangement of the password reverse firewall meets three basic requirements of the password reverse firewall, transparency and credibility are achieved, leakage is prevented, the safety of a user is improved, and the attack behavior of an internal attacker is particularly protected.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a cryptographic reverse firewall method suitable for digital signatures. Background technique [0002] The password reverse firewall technology appeared after the Snowden Prism incident in 2014. It is aimed at monitoring internal attackers and under the control of security software backdoors, how to ensure that the information transmitted by users is not leaked. It is a new technology that assumes that the computer used by the user is compromised, but how to ensure that the information he transmits will not be leaked. The fundamental difference is that the attacks considered before are all external adversaries, while the cryptographic reverse firewall technology mainly solves internal problems. Because many facts in real life have proved that various encryption software and other security-related things have backdoors, and the existence of internal attackers is cert...

AI Technical Summary

Problems solved by technology

[0010] Although the password reverse firewall is more convenient and simpler than the previous technology, and it does not need to analyze the internal algorithm to experiment with the internal random number, but the password reverse firewall has certain limitations, and its requirements for re-randomization are relatively high

Because the requirement of re-randomization exists, and most digital signatures (such as Schnorr signature, DSS signature, Hess signature and some famous signatures) have a hash function in the algorithm implementation, and the hash function is irreversible, which means that the password Reverse firewall technology is difficult to implement on most digital signatures

Images