低功耗嵌入式平台的SM2国密算法优化实现

刘赣秦; 李晖; 朱辉; 黄煜坤; 刘兴东

doi:10.11959/j.issn.2096-109x.2022080

您当前的位置：

首页 >

文章列表页 >

低功耗嵌入式平台的SM2国密算法优化实现

专题：密码学技术与应用 | 更新时间：2024-06-03

- 低功耗嵌入式平台的SM2国密算法优化实现
- Public key cryptographic algorithm SM2 optimized implementation on low power embedded platform
- 网络与信息安全学报 2022年8卷第6期页码：29-38
- 作者机构：
- 作者简介：
  
  [ "刘赣秦（1998- ），男，江西莲花人，西安电子科技大学硕士生，主要研究方向为密码算法的高性能优化" ]
  [ "李晖（1968- ），男，河南灵宝人，博士，西安电子科技大学教授、博士生导师，主要研究方向为密码学、无线网络安全、云计算安全、信息论与编码理论" ]
  [ "朱辉（1981- ），男，河南周口人，博士，西安电子科技大学教授、博士生导师，主要研究方向为数据安全与隐私保护、安全方案及协议设计、网络及应用安全" ]
  [ "黄煜坤（1998- ），男，湖北襄阳人，西安电子科技大学硕士生，主要研究方向为密码算法的高性能优化" ]
  [ "刘兴东（1992- ），男，湖南衡阳人，西安电子科技大学硕士生，主要研究方向为网络空间安全、可信执行环境、密码算法优化" ]
- 基金信息：
  
  国家自然科学基金;The National Natural Science Foundation of China(61972304);国家自然科学基金;The National Natural Science Foundation of China(61932015);陕西省重点研发计划;Shaanxi Provincial Key R＆D Program(2020ZDLGY08-04)
- DOI：10.11959/j.issn.2096-109x.2022080
  中图分类号： TP393
- 网络首发：2022-12，
  
  纸质出版：2022-12-15
- 稿件说明：
移动端阅览
刘赣秦, 李晖, 朱辉, 等. 低功耗嵌入式平台的SM2国密算法优化实现[J]. 网络与信息安全学报, 2022,8(6):29-38.

Ganqin LIU, Hui LI, Hui ZHU, et al. Public key cryptographic algorithm SM2 optimized implementation on low power embedded platform[J]. Chinese Journal of Network and Information Security, 2022, 8(6): 29-38.
刘赣秦, 李晖, 朱辉, 等. 低功耗嵌入式平台的SM2国密算法优化实现[J]. 网络与信息安全学报, 2022,8(6):29-38. DOI： 10.11959/j.issn.2096-109x.2022080.

Ganqin LIU, Hui LI, Hui ZHU, et al. Public key cryptographic algorithm SM2 optimized implementation on low power embedded platform[J]. Chinese Journal of Network and Information Security, 2022, 8(6): 29-38. DOI： 10.11959/j.issn.2096-109x.2022080.

摘要

随着无线通信技术的发展和智能终端的普及，越来越多的密码算法被应用到物联网设备中以保障通信安全和数据安全，其中，由国家密码管理局提出的 SM2 椭圆曲线公钥密码算法作为我国自主研发的椭圆曲线公钥密码算法具有安全性高、密钥短的优点，已在通信系统中广泛部署，应用于身份认证、密钥协商等关键环节。然而，由于算法涉及有限域上的大整数运算，计算开销较大，在低功耗嵌入式平台下的执行严重影响用户体验。因此，面向ARM-m系列处理器提出了一种低功耗嵌入式平台的SM2算法的高效实现方案。具体来说，通过 Thumb-2 指令集提供的支持处理进位和节省寻址周期，对大整数的模加、模减等基础运算进行优化，并结合平台可用寄存器的数量构建高效的基础运算模块；基于ARM-m系列处理器乘累加指令周期短的特点，优化蒙哥马利乘法实现，并结合CIOS算法设计高效的模乘方案，方案不再局限于梅森素数，极大地提高了模乘计算的速度和灵活性；在理论分析和实验测试的基础上，给出了嵌入式平台上多倍点标量乘法 wNAF 滑动窗法的窗长选取方法。实验测试结果表明，可有效提升资源受限的低功耗嵌入式平台中SM2 算法的计算效率，不做预计算的情况下在 Cortex-M3 处理器上测试签名速度可达 0.204 秒/次，验签速度0.388秒/次，加密速度0.415秒/次，解密速度0.197秒/次。

Abstract

With the development of wireless communication technology and the popularization of intelligent terminals

more and more cryptographic algorithms are applied to IoT devices to ensure the security of communication and data.Among them

the SM2 elliptic curve public key cryptography proposed by the State Cryptography Administration is an elliptic curve public key cryptography algorithm developed domestically

which has the advantages of high security and short key.SM2 has been widely deployed in various communication systems and is used in essential parts such as identity authentication and key negotiation.However

since SM2 involves large integer operations on finite fields

the computational cost is high

and its execution on a low-power embedded platform seriously affects the user experience.Therefore

an efficient implementation scheme of SM2 algorithm for low-power embedded platform was proposed for ARM-m series processors.Specifically

Thumb-2 instruction set was adopted to handle carry and save addressing cycles

basic operations such as modulo addition and sub-traction of large integers were optimized

and the number of available registers on the platform was combined to build efficient basic operations.Besides

based on the short multiplication and accumulation instruction cycle of ARM-m series processors

the implementation of Montgomery multiplication was optimized

and an efficient modular multiplication scheme was designed in combination with the CIOS algorithm.The scheme was no longer limited to Mersenne primes

and greatly improved the speed and flexibility of modular multiplication.Based on the theoretical analysis and experimental test

the window length selection method of the multiple point-scalar multiplication wNAF sliding window method on the embedded platform was given.The experimental test results show that the proposed scheme can effectively improve the computational efficiency of the SM2 algorithm on the resource-constrained low-power embedded platform.Without pre-calculation

the test signature speed can reach 0.204s/time

the signature verification speed is 0.388s/time

the encryption speed is 0.415s/time

and the decryption speed is 0.197s/time.

关键词

Keywords

references

国家密码管理局 . SM2 椭圆曲线公钥密码算法第 1 部分:总则:GM/T 0003.1-2012 [S ] . 北京:中国标准出版社 , 2012 :8.

State Cryptography Administration . SM2 elliptic curve public key cryptography algorithm part 1:general provisions:GM/T 0003.1-2012 [S ] . 8 Beijing:China Standard Press , 2012 :8.

罗玙榕 , 曹进 , 李晖 , 等 . 基于SM2联合签名的电子发票公开验证方案 [J ] . 网络与信息安全学报 , 2022 , 8 ( 2 ): 122 - 131 .

LUO Y R , CAO J , LI H , et al . Electronic invoice public verification scheme based on SM2 joint signature [J ] . Journal of Network and Information Security , 2022 , 8 ( 2 ): 122 - 131 .

陈锋 , 邹洪 , 吴亚楠 , 等 . 基于SM2密码体系的电力信息安全监控系统设计 [J ] . 电子设计工程 , 2022 , 30 ( 5 ): 100 - 103 , 108 .

CHEN F , ZOU H , WU Y N , et al . Design of power information security monitoring system based on sm2 cipher system [J ] . Electronic Design Engineering , 2022 , 30 ( 5 ): 100 - 103 , 108 .

程朝辉 . 基于SM2的无证书加密算法 [J ] . 密码学报 , 2021 , 8 ( 1 ): 87 - 95 .

CHENG C H . Certificateless encryption algorithm based on SM2 [J ] . Journal of Cryptography , 2021 , 8 ( 1 ): 87 - 95 .

MONTGOMERY P L . Modular multiplication without trial division [J ] . Mathematics of Computation , 1985 , 44 ( 170 ): 519 - 521 .

KOC C , ACAR T , JR B . Analyzing and comparing montgomery multiplication algorithms [J ] . Micro,IEEE , 1996 , 16 ( 3 ): 26 - 33 .

SOLINAS J A . Generalized mersenne numbers [M ] . Faculty of Mathematics,University of Waterloo , 1999 .

PARIHAR A , NAKHATE S . High-speed high-throughput VLSI Architecture for RSA montgomery modular multiplication with efficient format conversion [J ] . Journal of the Institution of Engineers (India) Series B , 2019 , 100 ( 2 ): 217 - 222 .

RAHMAN M S , HOSSAIN M S , RAHAT E H , et al . Efficient hardware implementation of 256-bit ECC processor over prime field [C ] // 2019 International Conference on Electrical,Computer and Communication Engineering (ECCE) . 2019 : 1 - 6 .

王腾飞 , 张海峰 , 许森 . SM2专用指令协处理器设计与实现 [J ] . 计算机工程与应用 , 2022 , 58 ( 2 ): 102 - 109 .

WANG T F , ZHANG H F , XU S . Design and implementation of SM2 special instruction coprocessor [J ] . Computer Engineering and Applications , 2022 , 58 ( 2 ): 102 - 109 .

DING J N , LI S G , GU Z . High-speed ECC processor over NIST prime fields applied with toom–cook multiplication [J ] . IEEE Transactions on Circuits and Systems I , 2019 , 66 ( 3 ): 1003 - 1016 .

李斌 , 周清雷 , 陈晓杰 , 等 . 可重构的素域SM2算法优化方法 [J ] . 通信学报 , 2022 , 43 ( 3 ): 30 - 41 .

LI B , ZHOU Q L , CHEN X J , et al . Optimization of reconfigurable SM2 algorithm over prime field [J ] . Journal of Communication , 2022 , 43 ( 3 ): 30 - 41 .

HOSSAIN M S , KONG Y . High-performance FPGA implementation of modular inversion over F_256 for elliptic curve cryptography [C ] // 2015 IEEE International Conference on Data Science and Data Intensive Systems . 2015 : 169 - 174 .

ZHOU L , SU C , HU Z , et al . Lightweight implementations of NIST P-256 and SM2 ECC on 8-bit resource-constraint embedded device [J ] . ACM Transactions on Embedded Computing Systems (TECS) , 2019 , 18 ( 3 ): 1 - 13 .

朱辉 , 黄煜坤 , 王枫为 , 等 . 一种基于图形处理器的高吞吐量SM2 数字签名计算方案 [J ] . 电子与信息学报 , 2022 , 44 ( 10 ): 1 - 10 .

ZHU H , HUANG Y K , WANG F W , et al . A high throughput SM2 digital signature computing scheme based on graphics processor [J ] . Journal of Electronics and Information Technology , 2022 , 44 ( 10 ): 1 - 10 .

LONGA P , GEBOTYS C . Efficient techniques for high-speed elliptic curve cryptography [C ] // International Workshop on Cryptographic Hardware and Embedded Systems . Heidelberg , 2010 : 80 - 94 .

COHEN H , MIYAJI A , ONO T . Efficient elliptic curve exponentiation using mixed coordinates [C ] // International Conference on the Theory and Application of Cryptology and Information Security . 1998 : 51 - 65 .

SETIADI I , KISTIJANTORO A I , MIYAJI A . Elliptic curve cryptography:Algorithms and implementation analysis over coordinate systems [C ] // 2015 2nd International Conference on Advanced Informatics:Concepts,Theory and Applications (ICAICTA) . 2015 : 1 - 6 .

LONGA P , MIRI A . Fast and flexible elliptic curve point arithmetic over prime fields [J ] . IEEE Transactions on Computers , 2008 , 57 ( 3 ): 289 - 302 .

HANKERSON D , MENEZES A J , VANSTONE S . Guide to elliptic curve cryptography [M ] . Springer Science ＆ Business Media , 2006 .

ISLAM M M , HOSSAIN M S , HASAN M K , et al . FPGA implementation of high-speed area-efficient processor for elliptic curve point multiplication over prime field [J ] . IEEE Access , 2019 , 7 : 178811 - 178826 .

国家密码管理局 . SM3 密码杂凑算法:GMT 0004.4-2012 [S ] . 北京:中国标准出版社 , 2012 :8.

National Cryptography Administration . SM3 password hashing algorithm:GMT 0004.4-2012 [S ] . Beijing:Standards Press of China , 2012 :8.

RIVAIN M . Fast and regular algorithms for scalar multiplication over elliptic curves [J ] . Cryptology ePrint Archive , 2011 .

GURA N , Patel A , Wander A , et al . Comparing elliptic curve cryptography and RSA on 8-bit CPUs [C ] // International Workshop on Cryptographic Hardware and Embedded Systems . 2004 : 119 - 132 .

Advanced Micro Devices,Inc . AMD graphic core next [R ] . Advanced Micro Devices,Inc , 2011 .

DUSSE S R , KALISKI B S . A cryptographic library for the Motorola DSP56000 [C ] // Workshop on the Theory and Application of Cryptographic Techniques . 1990 : 230 - 244 .

MUIR J , STINSON D . Minimality and other properties of the width-ݓ nonadjacent form [J ] . Mathematics of Computation , 2006 , 75 ( 253 ): 369 - 384 .

国家密码管理局 . SM2椭圆曲线公钥密码算法第5部分:参数定义:GMT 0003.4-2012 [S ] . 北京:中国标准出版社 , 2012 .

National Cryptography Administration . SM2 Elliptic curve public key cryptography algorithm Part 5:Parameter definition:GMT 0003.4-2012 [S ] . Beijing:Standards Press of China , 2012 .

闫闵 . 基于GPU的SM2数字签名和验证算法的快速实现与优化 [D ] . 上海:上海交通大学 , 2020 .

YAN M . Fast implementation and optimization of SM2 digital signature and verification algorithm based on GPU [D ] . Shanghai:Shanghai Jiaotong University , 2020 .

浏览量

669

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于国密SM2的车联网高效匿名认证协议

基于预测误差与位平面编码的密文域可逆信息隐藏算法

集群网络密钥管理方案研究综述

基于SM2的两方协作盲签名协议

可解释的知识图谱推理方法综述