Public key cryptographic algorithm SM2 optimized implementation on low power embedded platform

Ganqin LIU; Hui LI; Hui ZHU; Yukun HUANG; Xingdong LIU

doi:10.11959/j.issn.2096-109x.2022080

您当前的位置：

首页 >

文章列表页 >

Public key cryptographic algorithm SM2 optimized implementation on low power embedded platform

Topic: Techniques and applications of cryptography | 更新时间：2024-06-03

- Public key cryptographic algorithm SM2 optimized implementation on low power embedded platform
- Chinese Journal of Network and Information Security Vol. 8, Issue 6, Pages: 29-38(2022)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2022080
  CLC： TP393
- Online First：2022-12，
  
  Published：15 December 2022
- 稿件说明：
移动端阅览
Ganqin LIU, Hui LI, Hui ZHU, et al. Public key cryptographic algorithm SM2 optimized implementation on low power embedded platform[J]. Chinese Journal of Network and Information Security, 2022, 8(6): 29-38.
DOI：

Ganqin LIU, Hui LI, Hui ZHU, et al. Public key cryptographic algorithm SM2 optimized implementation on low power embedded platform[J]. Chinese Journal of Network and Information Security, 2022, 8(6): 29-38. DOI： 10.11959/j.issn.2096-109x.2022080.

摘要

随着无线通信技术的发展和智能终端的普及，越来越多的密码算法被应用到物联网设备中以保障通信安全和数据安全，其中，由国家密码管理局提出的 SM2 椭圆曲线公钥密码算法作为我国自主研发的椭圆曲线公钥密码算法具有安全性高、密钥短的优点，已在通信系统中广泛部署，应用于身份认证、密钥协商等关键环节。然而，由于算法涉及有限域上的大整数运算，计算开销较大，在低功耗嵌入式平台下的执行严重影响用户体验。因此，面向ARM-m系列处理器提出了一种低功耗嵌入式平台的SM2算法的高效实现方案。具体来说，通过 Thumb-2 指令集提供的支持处理进位和节省寻址周期，对大整数的模加、模减等基础运算进行优化，并结合平台可用寄存器的数量构建高效的基础运算模块；基于ARM-m系列处理器乘累加指令周期短的特点，优化蒙哥马利乘法实现，并结合CIOS算法设计高效的模乘方案，方案不再局限于梅森素数，极大地提高了模乘计算的速度和灵活性；在理论分析和实验测试的基础上，给出了嵌入式平台上多倍点标量乘法 wNAF 滑动窗法的窗长选取方法。实验测试结果表明，可有效提升资源受限的低功耗嵌入式平台中SM2 算法的计算效率，不做预计算的情况下在 Cortex-M3 处理器上测试签名速度可达 0.204 秒/次，验签速度0.388秒/次，加密速度0.415秒/次，解密速度0.197秒/次。

Abstract

With the development of wireless communication technology and the popularization of intelligent terminals

more and more cryptographic algorithms are applied to IoT devices to ensure the security of communication and data.Among them

the SM2 elliptic curve public key cryptography proposed by the State Cryptography Administration is an elliptic curve public key cryptography algorithm developed domestically

which has the advantages of high security and short key.SM2 has been widely deployed in various communication systems and is used in essential parts such as identity authentication and key negotiation.However

since SM2 involves large integer operations on finite fields

the computational cost is high

and its execution on a low-power embedded platform seriously affects the user experience.Therefore

an efficient implementation scheme of SM2 algorithm for low-power embedded platform was proposed for ARM-m series processors.Specifically

Thumb-2 instruction set was adopted to handle carry and save addressing cycles

basic operations such as modulo addition and sub-traction of large integers were optimized

and the number of available registers on the platform was combined to build efficient basic operations.Besides

based on the short multiplication and accumulation instruction cycle of ARM-m series processors

the implementation of Montgomery multiplication was optimized

and an efficient modular multiplication scheme was designed in combination with the CIOS algorithm.The scheme was no longer limited to Mersenne primes

and greatly improved the speed and flexibility of modular multiplication.Based on the theoretical analysis and experimental test

the window length selection method of the multiple point-scalar multiplication wNAF sliding window method on the embedded platform was given.The experimental test results show that the proposed scheme can effectively improve the computational efficiency of the SM2 algorithm on the resource-constrained low-power embedded platform.Without pre-calculation

the test signature speed can reach 0.204s/time

the signature verification speed is 0.388s/time

the encryption speed is 0.415s/time

and the decryption speed is 0.197s/time.

关键词

Keywords

references

国家密码管理局 . SM2 椭圆曲线公钥密码算法第 1 部分:总则:GM/T 0003.1-2012 [S ] . 北京:中国标准出版社 , 2012 :8.

State Cryptography Administration . SM2 elliptic curve public key cryptography algorithm part 1:general provisions:GM/T 0003.1-2012 [S ] . 8 Beijing:China Standard Press , 2012 :8.

罗玙榕 , 曹进 , 李晖 , 等 . 基于SM2联合签名的电子发票公开验证方案 [J ] . 网络与信息安全学报 , 2022 , 8 ( 2 ): 122 - 131 .

LUO Y R , CAO J , LI H , et al . Electronic invoice public verification scheme based on SM2 joint signature [J ] . Journal of Network and Information Security , 2022 , 8 ( 2 ): 122 - 131 .

陈锋 , 邹洪 , 吴亚楠 , 等 . 基于SM2密码体系的电力信息安全监控系统设计 [J ] . 电子设计工程 , 2022 , 30 ( 5 ): 100 - 103 , 108 .

CHEN F , ZOU H , WU Y N , et al . Design of power information security monitoring system based on sm2 cipher system [J ] . Electronic Design Engineering , 2022 , 30 ( 5 ): 100 - 103 , 108 .

程朝辉 . 基于SM2的无证书加密算法 [J ] . 密码学报 , 2021 , 8 ( 1 ): 87 - 95 .

CHENG C H . Certificateless encryption algorithm based on SM2 [J ] . Journal of Cryptography , 2021 , 8 ( 1 ): 87 - 95 .

MONTGOMERY P L . Modular multiplication without trial division [J ] . Mathematics of Computation , 1985 , 44 ( 170 ): 519 - 521 .

KOC C , ACAR T , JR B . Analyzing and comparing montgomery multiplication algorithms [J ] . Micro,IEEE , 1996 , 16 ( 3 ): 26 - 33 .

SOLINAS J A . Generalized mersenne numbers [M ] . Faculty of Mathematics,University of Waterloo , 1999 .

PARIHAR A , NAKHATE S . High-speed high-throughput VLSI Architecture for RSA montgomery modular multiplication with efficient format conversion [J ] . Journal of the Institution of Engineers (India) Series B , 2019 , 100 ( 2 ): 217 - 222 .

RAHMAN M S , HOSSAIN M S , RAHAT E H , et al . Efficient hardware implementation of 256-bit ECC processor over prime field [C ] // 2019 International Conference on Electrical,Computer and Communication Engineering (ECCE) . 2019 : 1 - 6 .

王腾飞 , 张海峰 , 许森 . SM2专用指令协处理器设计与实现 [J ] . 计算机工程与应用 , 2022 , 58 ( 2 ): 102 - 109 .

WANG T F , ZHANG H F , XU S . Design and implementation of SM2 special instruction coprocessor [J ] . Computer Engineering and Applications , 2022 , 58 ( 2 ): 102 - 109 .

DING J N , LI S G , GU Z . High-speed ECC processor over NIST prime fields applied with toom–cook multiplication [J ] . IEEE Transactions on Circuits and Systems I , 2019 , 66 ( 3 ): 1003 - 1016 .

李斌 , 周清雷 , 陈晓杰 , 等 . 可重构的素域SM2算法优化方法 [J ] . 通信学报 , 2022 , 43 ( 3 ): 30 - 41 .

LI B , ZHOU Q L , CHEN X J , et al . Optimization of reconfigurable SM2 algorithm over prime field [J ] . Journal of Communication , 2022 , 43 ( 3 ): 30 - 41 .

HOSSAIN M S , KONG Y . High-performance FPGA implementation of modular inversion over F_256 for elliptic curve cryptography [C ] // 2015 IEEE International Conference on Data Science and Data Intensive Systems . 2015 : 169 - 174 .

ZHOU L , SU C , HU Z , et al . Lightweight implementations of NIST P-256 and SM2 ECC on 8-bit resource-constraint embedded device [J ] . ACM Transactions on Embedded Computing Systems (TECS) , 2019 , 18 ( 3 ): 1 - 13 .

朱辉 , 黄煜坤 , 王枫为 , 等 . 一种基于图形处理器的高吞吐量SM2 数字签名计算方案 [J ] . 电子与信息学报 , 2022 , 44 ( 10 ): 1 - 10 .

ZHU H , HUANG Y K , WANG F W , et al . A high throughput SM2 digital signature computing scheme based on graphics processor [J ] . Journal of Electronics and Information Technology , 2022 , 44 ( 10 ): 1 - 10 .

LONGA P , GEBOTYS C . Efficient techniques for high-speed elliptic curve cryptography [C ] // International Workshop on Cryptographic Hardware and Embedded Systems . Heidelberg , 2010 : 80 - 94 .

COHEN H , MIYAJI A , ONO T . Efficient elliptic curve exponentiation using mixed coordinates [C ] // International Conference on the Theory and Application of Cryptology and Information Security . 1998 : 51 - 65 .

SETIADI I , KISTIJANTORO A I , MIYAJI A . Elliptic curve cryptography:Algorithms and implementation analysis over coordinate systems [C ] // 2015 2nd International Conference on Advanced Informatics:Concepts,Theory and Applications (ICAICTA) . 2015 : 1 - 6 .

LONGA P , MIRI A . Fast and flexible elliptic curve point arithmetic over prime fields [J ] . IEEE Transactions on Computers , 2008 , 57 ( 3 ): 289 - 302 .

HANKERSON D , MENEZES A J , VANSTONE S . Guide to elliptic curve cryptography [M ] . Springer Science ＆ Business Media , 2006 .

ISLAM M M , HOSSAIN M S , HASAN M K , et al . FPGA implementation of high-speed area-efficient processor for elliptic curve point multiplication over prime field [J ] . IEEE Access , 2019 , 7 : 178811 - 178826 .

国家密码管理局 . SM3 密码杂凑算法:GMT 0004.4-2012 [S ] . 北京:中国标准出版社 , 2012 :8.

National Cryptography Administration . SM3 password hashing algorithm:GMT 0004.4-2012 [S ] . Beijing:Standards Press of China , 2012 :8.

RIVAIN M . Fast and regular algorithms for scalar multiplication over elliptic curves [J ] . Cryptology ePrint Archive , 2011 .

GURA N , Patel A , Wander A , et al . Comparing elliptic curve cryptography and RSA on 8-bit CPUs [C ] // International Workshop on Cryptographic Hardware and Embedded Systems . 2004 : 119 - 132 .

Advanced Micro Devices,Inc . AMD graphic core next [R ] . Advanced Micro Devices,Inc , 2011 .

DUSSE S R , KALISKI B S . A cryptographic library for the Motorola DSP56000 [C ] // Workshop on the Theory and Application of Cryptographic Techniques . 1990 : 230 - 244 .

MUIR J , STINSON D . Minimality and other properties of the width-ݓ nonadjacent form [J ] . Mathematics of Computation , 2006 , 75 ( 253 ): 369 - 384 .

国家密码管理局 . SM2椭圆曲线公钥密码算法第5部分:参数定义:GMT 0003.4-2012 [S ] . 北京:中国标准出版社 , 2012 .

National Cryptography Administration . SM2 Elliptic curve public key cryptography algorithm Part 5:Parameter definition:GMT 0003.4-2012 [S ] . Beijing:Standards Press of China , 2012 .

闫闵 . 基于GPU的SM2数字签名和验证算法的快速实现与优化 [D ] . 上海:上海交通大学 , 2020 .

YAN M . Fast implementation and optimization of SM2 digital signature and verification algorithm based on GPU [D ] . Shanghai:Shanghai Jiaotong University , 2020 .

Views

669

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Efficient anonymous authentication protocol for internet of vehicles based on Chinese cryptographic SM2

Reversible data hiding algorithm in encrypted images based on prediction error and bitplane coding

Survey of key management schemes for cluster networks

Two-party cooperative blind signature based on SM2

Survey on explainable knowledge graph reasoning methods

Related Author

XU Li

FANG He

SU Binting

Mengning JI

Haiyong WANG

Jun LIU

Lin YUAN

Zhishang FENG

Related Institution

Fujian Provincial Key Laboratory of Network Security and Cryptology

Engineering Research Center of Cyber Security and Education Informatization

Fujian Normal University

Xidian University, School of Cyber Engineering, Xi′an

School of Marxism, Xidian University, Xi′an

⁰