CN111526016B - Parameter configuration method and device for cryptographic algorithm - Google Patents

Abstract

The present application discloses a parameter configuration method and device for a cryptographic algorithm. The method includes: obtaining a parameter configuration instruction of a cryptographic algorithm; responding to the parameter configuration instruction, generating a corresponding parameter factor according to the parameter type carried in the configuration instruction; judging the parameter factor Whether it is the default parameter factor; when it is judged that the parameter factor is the default parameter factor, use the parameter corresponding to the default parameter factor as the configuration parameter of the encryption algorithm; when it is judged that the parameter factor is not the default parameter factor, according to the parameter set index corresponding to the parameter factor Number, obtain the target password parameter set corresponding to the parameter factor, and use the parameters in the target password parameter set as the configuration parameters of the password algorithm, which solves the problem that the existing default algorithm parameters cannot realize the flexible configuration of the algorithm parameters, and cannot satisfy the same key Technical issues of flexible control of encryption and decryption results in multi-object and multi-business scenarios under the system.

Description

Parameter configuration method and device for a cryptographic algorithm

technical field

The present application relates to the technical field of information security, and in particular to a parameter configuration method and device for a cryptographic algorithm.

Background technique

With the development of information technology, information security has received extensive attention. Among them, the encryption and decryption technology is a common security measure used in information security.

At present, the encryption and decryption equipment supporting the domestic SM series encryption algorithm has been fully used in the fields of electric power, finance, transportation, etc., to realize security functions such as data encryption and decryption, identity authentication, legality and integrity verification. When traditional encryption and decryption devices use SM series cryptographic algorithms for data encryption and decryption operations, most of them use default algorithm parameters. When the data plaintext/ciphertext and key are determined, the encryption/decryption results are constant and the algorithm cannot be implemented. The flexible configuration of parameters cannot satisfy the flexible control of encryption and decryption results in multi-object and multi-service scenarios under the same key system.

Contents of the invention

This application provides a parameter configuration method and device for a cryptographic algorithm, which solves the problem that the existing default algorithm parameters are used. In the case of data plaintext/ciphertext and key determination, the encryption/decryption results are constant and the algorithm cannot be implemented. The flexible configuration of parameters cannot meet the technical problem of flexible control of encryption and decryption results in multi-object and multi-service scenarios under the same key system.

In view of this, the first aspect of the present application provides a parameter configuration method of a cryptographic algorithm, including:

Obtain the parameter configuration instruction of the cryptographic algorithm;

In response to the parameter configuration instruction, generate a corresponding parameter factor according to the parameter type carried in the configuration instruction;

judging whether the parameter factor is a default parameter factor;

When it is determined that the parameter factor is a default parameter factor, the parameter corresponding to the default parameter factor is used as a configuration parameter of the encryption algorithm;

When it is determined that the parameter factor is not a default parameter factor, according to the parameter set index number corresponding to the parameter factor, obtain the target password parameter set corresponding to the parameter factor, and use the parameters in the target password parameter set as the Configuration parameters for the cryptographic algorithm.

Optionally, the acquiring the target parameter set corresponding to the parameter factor according to the parameter set index number corresponding to the parameter factor, and using the parameters in the target parameter set as configuration parameters of the encryption algorithm specifically includes:

Acquiring the parameter set index number corresponding to the parameter factor according to the corresponding relationship between the parameter factor and the parameter set index number;

In the cryptographic parameter set stored locally, index the target cryptographic parameter set corresponding to the index number of the parameter set, and use the parameters in the target cryptographic parameter set as configuration parameters of the cryptographic algorithm.

Optionally, also include:

Obtain the password parameter set, and encrypt and store the password parameter set locally.

Optionally, also include:

Perform cryptographic operations of the cryptographic algorithm according to the configuration parameters.

Optionally, the password parameter set includes: a hardening parameter set and a device parameter set.

The second aspect of the present application provides a parameter configuration device for a cryptographic algorithm, including: an instruction acquisition unit, configured to obtain a parameter configuration instruction for a cryptographic algorithm;

A parameter factor generating unit, configured to generate a corresponding parameter factor in response to the parameter configuration instruction according to the parameter type carried in the configuration instruction;

A judging unit, configured to judge whether the parameter factor is a default parameter factor;

The first parameter acquisition unit is configured to use the parameter corresponding to the default parameter factor as a configuration parameter of the encryption algorithm when it is determined that the parameter factor is a default parameter factor;

The second parameter acquisition unit is configured to acquire the target password parameter set corresponding to the parameter factor according to the parameter set index number corresponding to the parameter factor when it is determined that the parameter factor is not a default parameter factor, and store the target The parameters in the password parameter set are used as the configuration parameters of the password algorithm.

Optionally, the acquiring the target parameter set corresponding to the parameter factor according to the parameter set index number corresponding to the parameter factor, and using the parameters in the target parameter set as configuration parameters of the encryption algorithm specifically includes:

Acquiring the parameter set index number corresponding to the parameter factor according to the corresponding relationship between the parameter factor and the parameter set index number;

In the cryptographic parameter set stored locally, index the target cryptographic parameter set corresponding to the index number of the parameter set, and use the parameters in the target cryptographic parameter set as configuration parameters of the cryptographic algorithm.

Optionally, also include:

A storage unit, configured to acquire the password parameter set, and encrypt and store the password parameter set locally.

Optionally, also include:

A cryptographic operation unit, configured to perform cryptographic operations of the cryptographic algorithm according to the configuration parameters.

Optionally, the password parameter set includes: a hardening parameter set and a device parameter set.

It can be seen from the above technical solutions that the embodiments of the present application have the following advantages:

The present application provides a parameter configuration method of a cryptographic algorithm, including: obtaining a parameter configuration instruction of a cryptographic algorithm; in response to the parameter configuration instruction, generating a corresponding parameter factor according to the parameter type carried in the configuration instruction; judging whether the parameter factor is the default Parameter factor; when it is judged that the parameter factor is the default parameter factor, the parameter corresponding to the default parameter factor is used as the configuration parameter of the encryption algorithm; when it is judged that the parameter factor is not the default parameter factor, according to the parameter set index number corresponding to the parameter factor, obtain The target cryptographic parameter set corresponding to the parameter factor, and the parameters in the target cryptographic parameter set are used as the configuration parameters of the cryptographic algorithm.

In this application, after obtaining the parameter configuration instruction of the cryptographic algorithm, the parameter factor corresponding to the parameter configuration instruction is generated according to the parameter type carried in the configuration instruction, and then it is judged whether the parameter factor is the default parameter factor, and if so, the default parameter The parameter corresponding to the factor is used as the configuration parameter of the cryptographic algorithm, if not, according to the parameter set index number corresponding to the parameter factor, the target cryptographic parameter set corresponding to the parameter factor is obtained, and the parameters in the target cryptographic parameter set are used as the configuration parameters of the cryptographic algorithm, Configuration parameters can be flexibly configured according to configuration instructions, and multi-object and multi-service scenarios can be encrypted and decrypted under the same key system, thus solving the problem of using default algorithm parameters in data plaintext/ciphertext, encrypted When the encryption key is determined, the encryption/decryption result is constant, and the flexible configuration of algorithm parameters cannot be realized, and the technical problem of flexible control of the encryption and decryption operation results in multi-object and multi-service scenarios under the same key system cannot be satisfied.

Description of drawings

FIG. 1 is a schematic flowchart of a first embodiment of a method for configuring parameters of a cryptographic algorithm in an embodiment of the present application;

FIG. 2 is a schematic flowchart of a second embodiment of a method for configuring parameters of a cryptographic algorithm in an embodiment of the present application;

FIG. 3 is a schematic structural diagram of a device for configuring parameters of a cryptographic algorithm in an embodiment of the present application.

detailed description

The embodiment of the present application provides a parameter configuration method and device for a cryptographic algorithm, which solves the problem that the existing default algorithm parameters are used. When the data plaintext/ciphertext and key are determined, the encryption/decryption result is constant and cannot The flexible configuration of algorithm parameters cannot meet the technical problem of flexible control of encryption and decryption results in multi-object and multi-service scenarios under the same key system.

In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiment of the application will be clearly and completely described below in conjunction with the accompanying drawings in the embodiment of the application. Obviously, the described embodiment is only It is a part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

Please refer to FIG. 1, a schematic flow chart of a first embodiment of a method for configuring parameters of a cryptographic algorithm in the embodiment of the present application, including:

Step 101, acquiring a parameter configuration instruction of a cryptographic algorithm.

When cryptographic algorithms are used to encrypt and decrypt cryptographic operations, the operation of cryptographic algorithms is realized based on the configuration parameters corresponding to cryptographic algorithms. Therefore, when performing cryptographic algorithms, first obtain the parameter configuration instructions of cryptographic algorithms, and configure the corresponding configuration parameters of cryptographic algorithms. Configuration.

It can be understood that the acquisition of the parameter configuration instructions can be input by personnel through the visual interface provided by the corresponding operating software of the cryptographic algorithm, or in other ways, which can be selected by those skilled in the art according to needs, and will not be repeated here.

Step 102: In response to the parameter configuration instruction, generate a corresponding parameter factor according to the parameter type carried in the configuration instruction.

After the parameter configuration instruction is obtained, the parameter factor corresponding to the parameter configuration instruction is generated according to the parameter type carried in the configuration instruction.

Step 103, judging whether the parameter factor is a default parameter factor.

After the parameter factor is obtained, it is judged whether the parameter factor is a default parameter factor, and then the configuration parameter corresponding to the encryption algorithm is flexibly determined according to the judgment result.

Step 104, when it is determined that the parameter factor is a default parameter factor, use the parameter corresponding to the default parameter factor as a configuration parameter of the encryption algorithm.

When the parameter factor is the default parameter factor, the parameter corresponding to the default parameter factor is used as the configuration parameter of the cryptographic algorithm, realizing the configuration of the configuration parameter of the cryptographic algorithm when the parameter factor is the default parameter factor.

Step 105. When it is determined that the parameter factor is not the default parameter factor, according to the parameter set index number corresponding to the parameter factor, obtain the target cryptographic parameter set corresponding to the parameter factor, and use the parameters in the target cryptographic parameter set as configuration parameters of the cryptographic algorithm.

When the parameter factor is a non-default parameter factor, according to the parameter set index number corresponding to the parameter factor, obtain the target cryptographic parameter set corresponding to the parameter factor, and use the parameters in the target cryptographic parameter set as the configuration parameters of the cryptographic algorithm. In this way, when the parameter When the factor is not the default parameter factor, the configuration of the configuration parameters of the encryption algorithm.

In this embodiment, after obtaining the parameter configuration instruction of the cryptographic algorithm, according to the parameter type carried in the configuration instruction, the parameter factor corresponding to the parameter configuration instruction is generated, and then it is judged whether the parameter factor is the default parameter factor, and if so, the default The parameter corresponding to the parameter factor is used as the configuration parameter of the cryptographic algorithm, if not, according to the parameter set index number corresponding to the parameter factor, the target cryptographic parameter set corresponding to the parameter factor is obtained, and the parameters in the target cryptographic parameter set are used as the configuration parameters of the cryptographic algorithm , the configuration parameters can be flexibly configured according to the configuration instructions, and the encryption and decryption operations can be performed on multiple objects and multiple business scenarios under the same key system, thus solving the problem of using default algorithm parameters in the data plaintext/ciphertext, When the key is determined, the encryption/decryption results are constant, and the flexible configuration of algorithm parameters cannot be realized, and the technical problem of flexible control of encryption and decryption results in multi-object and multi-business scenarios under the same key system cannot be satisfied.

The foregoing is the first embodiment of a method for configuring a parameter of a cryptographic algorithm provided by the embodiment of the present application, and the following is the second embodiment of the method for configuring a parameter of a cryptographic algorithm provided by the embodiment of the present application.

Please refer to FIG. 2, a schematic flowchart of a second embodiment of a method for configuring parameters of a cryptographic algorithm in the embodiment of the present application, including:

Step 200: Obtain a password parameter set, and encrypt and store the password parameter set locally.

It should be noted that the set of password parameters is encrypted and stored to prevent the set of password parameters from being stolen or illegally embezzled.

The password parameter set in this embodiment includes: a hardening parameter set and a device parameter set.

It should be noted that the parameter factor corresponding to the fixed parameter set is the fixed parameter factor, and the fixed parameter factor can be identified by the parameter field in the special parameter forced switching instruction, or can be realized by the customized information identification in the parameter field of the device instruction.

The parameter factor corresponding to the corresponding equipment parameter set is the equipment parameter factor, and the equipment parameter factor is realized by customizing the parameter identification information in the original instruction parameter field of the parameter configuration device, and the parameter identification information includes the index number of the parameter set to be switched.

Step 201 , acquiring a parameter configuration instruction of a cryptographic algorithm.

It should be noted that step 201 is similar to step 101 in the first embodiment, for details, refer to the description of step 101 above, and details are not repeated here.

Step 202: In response to the parameter configuration instruction, generate a corresponding parameter factor according to the parameter type carried in the configuration instruction.

It should be noted that step 202 is similar to step 102 in the first embodiment, for details, refer to the description of step 102 above, and details are not repeated here.

Step 203, judging whether the parameter factor is a default parameter factor.

It should be noted that step 203 is similar to step 103 in the first embodiment, for details, refer to the description of step 103 above, and details are not repeated here.

Step 204, when it is determined that the parameter factor is a default parameter factor, use the parameter corresponding to the default parameter factor as a configuration parameter of the encryption algorithm.

It should be noted that step 204 is similar to step 104 in the first embodiment, for details, reference may be made to the description of step 104 above, and details are not repeated here.

Step 205, when it is determined that the parameter factor is not the default parameter factor, according to the correspondence between the parameter factor and the parameter set index number, obtain the parameter set index number corresponding to the parameter factor.

Step 206: Index the target cryptographic parameter set corresponding to the index number of the parameter set in the cryptographic parameter set stored locally, and use the parameters in the target cryptographic parameter set as configuration parameters of the cryptographic algorithm.

It should be noted that, in this embodiment, when the parameter factor is the default parameter factor, there is no need to index the parameter set from the password parameter set stored locally, and directly use the parameter corresponding to the default parameter factor as the password configuration parameter, and when the non-default parameter For the parameter factor corresponding to the cryptographic algorithm, the corresponding target cryptographic parameter set needs to be determined from the cryptographic parameter set locally stored in the parameter configuration device.

Step 207, perform cryptographic operations of cryptographic algorithms according to configuration parameters.

It should be noted that, after obtaining the configuration parameters, the cryptographic operation of the cryptographic algorithm can be performed according to the configured algorithm.

In this embodiment, after obtaining the parameter configuration instruction of the cryptographic algorithm, according to the parameter type carried in the configuration instruction, the parameter factor corresponding to the parameter configuration instruction is generated, and then it is judged whether the parameter factor is the default parameter factor, and if so, the default The parameter corresponding to the parameter factor is used as the configuration parameter of the cryptographic algorithm, if not, according to the parameter set index number corresponding to the parameter factor, the target cryptographic parameter set corresponding to the parameter factor is obtained, and the parameters in the target cryptographic parameter set are used as the configuration parameters of the cryptographic algorithm , the configuration parameters can be flexibly configured according to the configuration instructions, and the encryption and decryption operations can be performed on multiple objects and multiple business scenarios under the same key system, thus solving the problem of using default algorithm parameters in the data plaintext/ciphertext, When the key is determined, the encryption/decryption results are constant, and the flexible configuration of algorithm parameters cannot be realized, and the technical problem of flexible control of encryption and decryption results in multi-object and multi-business scenarios under the same key system cannot be satisfied.

The above is the second embodiment of a method for configuring parameters of a cryptographic algorithm provided by the embodiment of the present application, and the following is an embodiment of the device for configuring parameters of a cryptographic algorithm provided by the embodiment of the present application, please refer to FIG. 3 .

A device for configuring parameters of a cryptographic algorithm provided in an embodiment of the present application includes:

An instruction acquisition unit 301, configured to acquire a parameter configuration instruction of a cryptographic algorithm;

The parameter factor generation unit 302 is configured to generate a corresponding parameter factor according to the parameter type carried in the configuration instruction in response to the parameter configuration instruction;

Judging unit 303, configured to judge whether the parameter factor is a default parameter factor;

The first parameter acquisition unit 304 is configured to use the parameter corresponding to the default parameter factor as a configuration parameter of the cryptographic algorithm when it is determined that the parameter factor is a default parameter factor;

The second parameter acquisition unit 305 is used to obtain the target password parameter set corresponding to the parameter factor according to the parameter set index number corresponding to the parameter factor when it is determined that the parameter factor is not the default parameter factor, and use the parameters in the target password parameter set as the password Algorithm configuration parameters.

Further, according to the parameter set index number corresponding to the parameter factor, the target parameter set corresponding to the parameter factor is obtained, and the parameters in the target parameter set are used as the configuration parameters of the cryptographic algorithm, specifically including:

Obtain the parameter set index number corresponding to the parameter factor according to the corresponding relationship between the parameter factor and the parameter set index number;

In the cryptographic parameter set stored locally, index the target cryptographic parameter set corresponding to the index number of the parameter set, and use the parameters in the target cryptographic parameter set as configuration parameters of the cryptographic algorithm.

Further, it also includes:

The storage unit is used to obtain the password parameter set, and encrypt and store the password parameter set locally.

Further, it also includes:

The cryptographic operation unit is configured to perform cryptographic operations of cryptographic algorithms according to configuration parameters.

Further, the password parameter set includes: a hardening parameter set and a device parameter set.

The parameter configuration device of a cryptographic algorithm provided in this embodiment, after obtaining the parameter configuration instruction of the cryptographic algorithm, generates a parameter factor corresponding to the parameter configuration instruction according to the parameter type carried in the configuration instruction, and then judges whether the parameter factor is Default parameter factor, if yes, use the parameter corresponding to the default parameter factor as the configuration parameter of the cryptographic algorithm, if not, obtain the target password parameter set corresponding to the parameter factor according to the parameter set index number corresponding to the parameter factor, and set the target password parameter The centralized parameters are used as the configuration parameters of the cryptographic algorithm, which can be flexibly configured according to the configuration instructions, and can perform encryption and decryption operations on multiple objects and multiple business scenarios under the same key system, thereby solving the problem of using the default algorithm Parameters, when the data plaintext/ciphertext and key are determined, the encryption/decryption result is constant, and the flexible configuration of algorithm parameters cannot be realized, and the encryption and decryption operation results in multi-object and multi-business scenarios under the same key system cannot be satisfied. technical issues of flexible control.

Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working process of the above-described devices and units can refer to the corresponding process in the foregoing method embodiments, and details are not repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed devices and methods may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or integrated. to another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

A unit described as a separate component may or may not be physically separated, and a component shown as a unit may or may not be a physical unit, that is, it may be located in one place, or may also be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

If the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or part of the contribution to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods in various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program codes. .

As mentioned above, the above embodiments are only used to illustrate the technical solutions of the present application, and are not intended to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still understand the foregoing The technical solutions described in each embodiment are modified, or some of the technical features are equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the application.

Claims (4)

1. A parameter configuration method of a cryptographic algorithm is characterized by comprising the following steps:

acquiring a parameter configuration instruction of a cryptographic algorithm;

responding to the parameter configuration instruction, and generating a corresponding parameter factor according to the parameter type carried in the configuration instruction;

judging whether the parameter factor is a default parameter factor;

when the parameter factor is judged to be a default parameter factor, taking a parameter corresponding to the default parameter factor as a configuration parameter of the cryptographic algorithm;

when the parameter factor is judged to be a non-default parameter factor, acquiring a target password parameter set corresponding to the parameter factor according to a parameter set index number corresponding to the parameter factor, and taking parameters in the target password parameter set as configuration parameters of the password algorithm;

the obtaining of the target parameter set corresponding to the parameter factor according to the parameter set index number corresponding to the parameter factor, and using the parameters in the target parameter set as configuration parameters of the cryptographic algorithm specifically includes:

acquiring a parameter set index number corresponding to the parameter factor according to the corresponding relation between the parameter factor and the parameter set index number;

in a locally stored password parameter set, indexing a target password parameter set corresponding to the parameter set index number, and taking parameters in the target password parameter set as configuration parameters of the password algorithm;

acquiring the password parameter set, and encrypting and storing the password parameter set locally;

and carrying out the cryptographic operation of the cryptographic algorithm according to the configuration parameters.

2. The method of claim 1, wherein the set of cryptographic parameters comprises: a set of curing parameters and a set of device parameters.

3. A parameter configuration apparatus for a cryptographic algorithm, comprising:

the instruction acquisition unit is used for acquiring a parameter configuration instruction of a cryptographic algorithm;

the parameter factor generating unit is used for responding to the parameter configuration instruction and generating a corresponding parameter factor according to the parameter type carried in the configuration instruction;

the judging unit is used for judging whether the parameter factor is a default parameter factor;

the first parameter obtaining unit is used for taking the parameter corresponding to the default parameter factor as the configuration parameter of the cryptographic algorithm when the parameter factor is judged to be the default parameter factor;

the second parameter obtaining unit is used for obtaining a target password parameter set corresponding to the parameter factor according to the parameter set index number corresponding to the parameter factor when the parameter factor is judged to be not the default parameter factor, and taking the parameters in the target password parameter set as the configuration parameters of the password algorithm;

the obtaining a target parameter set corresponding to the parameter factor according to the parameter set index number corresponding to the parameter factor, and using the parameters in the target parameter set as configuration parameters of the cryptographic algorithm specifically includes:

acquiring a parameter set index number corresponding to the parameter factor according to the corresponding relation between the parameter factor and the parameter set index number;

in a locally stored password parameter set, indexing a target password parameter set corresponding to the parameter set index number, and taking parameters in the target password parameter set as configuration parameters of the password algorithm;

the storage unit is used for acquiring the password parameter set and encrypting and storing the password parameter set locally;

and the password operation unit is used for performing password operation of the password algorithm according to the configuration parameters.

4. The parameter configuration apparatus of a cryptographic algorithm according to claim 3, wherein the set of cryptographic parameters comprises: a set of curing parameters and a set of device parameters.

Images