Embedding of national cryptographic algorithm in Hyperledger Fabric

Qi CAO; Shuhua RUAN; Xingshu CHEN; Xiao LAN; Hongxia ZHANG; Hongjian JIN

doi:10.11959/j.issn.2096-109x.2021007

您当前的位置：

首页 >

文章列表页 >

Embedding of national cryptographic algorithm in Hyperledger Fabric

Topic Ⅱ: Blockchain Security | 更新时间：2024-06-03

- Embedding of national cryptographic algorithm in Hyperledger Fabric
- Chinese Journal of Network and Information Security Vol. 7, Issue 1, Pages: 65-75(2021)
- 作者机构：
  
  1. 四川大学网络空间安全学院，四川成都 610065
  2. 四川大学网络空间安全研究院，四川成都 610065
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2021007
  CLC： TP309.2
- Online First：2021-02，
  
  Published：15 February 2021
- 稿件说明：
移动端阅览
Qi CAO, Shuhua RUAN, Xingshu CHEN, et al. Embedding of national cryptographic algorithm in Hyperledger Fabric[J]. Chinese Journal of Network and Information Security, 2021, 7(1): 65-75.
DOI：

Qi CAO, Shuhua RUAN, Xingshu CHEN, et al. Embedding of national cryptographic algorithm in Hyperledger Fabric[J]. Chinese Journal of Network and Information Security, 2021, 7(1): 65-75. DOI： 10.11959/j.issn.2096-109x.2021007.

摘要

Hyperledger Fabric 是为企业级商用区块链项目提供支撑的且可扩展的联盟链平台，密码算法为该平台的核心，保证上链数据的安全和不可篡改，但原始Fabric平台缺乏对国密算法的支持。因此，设计并实现了Fabric平台的国密算法的嵌入和支持。首先，通过分析Fabric平台中组件间交互逻辑和密码算法的调用场景，提出了在该平台嵌入国密支持的设计思路；其次，基于同济开源国密实现源码，为 Fabric 平台BCCSP添加SM2、SM3和SM4算法模块与接口；再次，将Fabric平台的各组件上层应用的密码算法调用接口与对应国密算法接口相关联，实现上层应用对国密算法调用的支持；最后，通过创建 fabric-gm 联盟链测试实例验证Fabric平台中嵌入的国密算法模块和接口的正确性及有效性，并与原生Fabric平台镜像构建的测试实例进行了性能比较。实验结果表明，嵌入的国密算法模块和接口可用、正确且生成的国密证书有效，与原生Fabric平台镜像相比，网络启动时间增加3%，毫秒级单位下的交易时间开销增加1倍，动态证书生成时间增加9%，各项性能指标均在可接受范围内。

Abstract

Hyperledger Fabric is an extensible alliance blockchain platform and provides support for enterprise-level commercial blockchain projects.The cryptographic algorithm is the core technologies of the platform

ensuring the security and non-tampering of the data on the chain.But the original Fabric platform lacks the national cryptographic algorithm support.The embedding and support of the national cryptographic algorithm of the Fabric platform was designed and implemented.Firstly

the interaction logic of between components and the invocation scenario of each type of cryptographic algorithm in the Fabric platform were analyzed

an idea of embedding national cryptographic algorithm support for the platform was proposed.Secondly

the modules and interfaces for SM2

SM3 and SM4 were added to BCCSP of the Fabric platform based on the open source code of national cryptographic algorithm implementation.Thirdly

the interface of cryptographic algorithm invoked by the upper layer of each component is associated to the interface of corresponding national cryptographic algorithms

which realized the invocation support of national cryptographic algorithm for the upper layer applications.Finally

the correctness and effectiveness of the embedded national cryptographic algorithm were verified by creating a fabric-gm test instance.And compared with the performances of the test instance built by the mirror of the native Fabric platform.The experimental results show that the embedded national cryptographic algorithm interfaces are corrected and the generated national cryptographic certificates are effective.Moreover

compared with the native Fabric platform

the network start up time increases by about 3%.In the millisecond unit

the transaction time cost increases by about one time

the dynamic certificate generation time increases by about 9%

and all the performance are within the acceptable range.

关键词

Keywords

references

hyperledger-fabricdocs documentation [EB ] .

董友康 , 张大伟 , 韩臻 , 等 . 基于联盟区块链的董事会电子投票系统 [J ] . 网络与信息安全学报 , 2017 , 3 ( 12 ): 31 - 37 .

DONG Y K , ZHANG D W , HAN Z , et al . Board voting system based on the consortium blockchains [J ] . Chinese Journal of Net-work and Information Security , 2017 , 3 ( 12 ): 31 - 37 .

潘晨 , 刘志强 , 刘振 , 等 . 区块链可扩展性研究:问题与方法 [J ] . 计算机研究与发展 , 2018 , 55 ( 10 ): 7 - 18 .

PAN C , LIU Z Q , LIU Z , et al . Research on scalability of block-chain technology:problems and methods [J ] . Journal of Computer Research and Development , 2018 , 55 ( 10 ): 7 - 18 .

GUEGAN D . Public blockchain versus private blockhain [J ] . documents de travail du centre deconomie de la sorbonne , 2017 .

An introduction to hyperledger [EB ] .

中华人民共和国金融行业标准 . 金融分布式账本技术安全规范 [EB ] .

Financial industry standard of the people's Republic of China . Se-curity specification for financial distributed ledger technology [EB ] .

国家密码管理局 . SM2椭圆曲线公钥密码算法 [EB ] .

State Cryptography Administration . Public key cryptographic algo-rithm sm2 based on elliptic curves [EB ] .

郭青霄 , 张大伟 , 常亮 , 等 . 基于 SM2 的代理保护代理签名的设计与实现 [J ] . 网络与信息安全学报 , 2017 , 3 ( 9 ): 47 - 54 .

GUO Q X , ZHANG D W , CHANG L , et al . Design and implemen-tation of proxy-protected proxy signature based on SM2 [J ] . Chinese Journal of Network and Information Security , 2017 , 3 ( 9 ): 47 - 54 .

国家密码管理局 . SM3密码杂凑算法 [EB ] .

State Cryptography Administration . SM3 Cryptographic hash algo-rithm [EB ] .

邵梦丽 , 殷新春 , 李艳梅 . SM3杂凑算法的SoPC组件实现 [J ] . 网络与信息安全学报 , 2017 , 3 ( 5 ): 47 - 53 .

SHAO M L , YIN X C , LI Y M . Implementation of SM3 algorithm based on SoPC component [J ] . Chinese Journal of Network and In-formation Security , 2017 , 3 ( 5 ): 47 - 53 .

Tongji blockchain Research Institute . Hyperledger-Fabric-gm [EB ] .

张青禾 . 区块链中的身份识别和访问控制技术研究 [D ] . 北京:北京交通大学 , 2018 .

ZHANG Q H . Research on identification and acess control in blockchain [D ] . Beijing:Beijing Jiaotong University , 2018 .

张梦一 . 基于区块链的通用积分管理系统 [D ] . 济南:山东大学 , 2019 .

ZHANG M Y . General integration management system based on blockchain [D ] . Jinan:Shandong University , 2019 .

国家密码管理局 . SM4分组密码算法 [EB ] .

State Cryptography Administration . SM4 Block cipher algo-rithm [EB ] .

ANDROULAKI E , BARGER A , BORTNIKOV V , et al . Hyperledger Fabric:a distributed operating system for permissioned blockchains [C ] // Proceedings of the Thirteenth EuroSys Conference (EuroSys '18).Association for Computing Machinery . 2018 : 1 - 15 .

hyperledger-fabric-ca documentation [EB ] .

Hyperledger Fabric SDKs [EB ] .

陈剑雄 , 张董朱 . 深度探索区块链 Hyperledger 技术与应用 [M ] . 北京 : 机械工业出版社 , 2018 .

CHEN J X , ZHANG D Z . In-depth exploration of blockchain Hyperledger technology and application [M ] . BeiJing : China Ma-chine Press , 2018 .

同济区块链研究院 . 国密SM2、SM3和SM4算法实现 [EB ] .

Suzhou Tongji blockchain Research Institute . Implementation of SM2,SM3 and SM4 algorithms [EB ] .

GUAN Z . GmSSL [EB ] .

SM2算法与原生RSA、ECDSA算法的比较 [EB ] .

Comparison of SM2 algorithm with RSA and ECDSA [EB ] .

Views

777

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Ring adaptor signature scheme based on SM2 digital signature algorithm

Survey of decentralized public key infrastructure

Chameleon hash function based on SM3 and its applications

Efficient anonymous authentication protocol for internet of vehicles based on Chinese cryptographic SM2

Blockchain smart contract vulnerability detection based on GR algorithm

Related Author

Xu Xinyue

Xu Shujiang

Wang Lianhai

Zhang Shuhui

Shao Wei

Wang Qizheng

SHI Chaoming

YAN Zheng

Related Institution

Shandong Provincial Key Laboratory of Industrial Network and Information System Security, Shandong Fundamental Research Center for Computer Science

Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan), Qilu University of Technology (Shandong Academy of Sciences)

Shield Lab, Trustworthiness Lab, Huawei Technologies Co., Ltd.

State Key Laboratory of Integrated Services Network, Xidian University, Xi’ an

School of Cyber Engineering, Xidian University, Xi’ an

⁰