Research And Application Of Anti Quantum Cryptography

With the rapid development and popularization of network information technology,network security has become more and more important.The deployment of PKI(Public Key Infrastructure)and the application of digital certificates provide a way for users to obtain information and share data on computer networks.Safe network environment.The rapid development of the Internet has also made the application of electronic payments more and more common.At present,electronic payments basically provide payment services through third-party payment platforms.The security of the payment process is the foundation of the third-party payment platform.However,with the introduction of the Shor quantum algorithm and Grover quantum algorithm,the public key cryptosystem RSA based on the large integer factorization problem and the elliptic curve cryptographic algorithm ECC based on the discrete logarithm problem can be used in polynomial time under a quantum computer.Be solved.With the continuous increase of quantum number of quantum computers in recent years,once quantum computers mature,there will be great hidden dangers in the security of digital certificates and third-party payments based on classical public key cryptosystems.In order to solve the above problems,this article has done the following work:First,a digital certificate scheme based on the Falcon signature algorithm is presented,including the issuance and verification process of a digital certificate against quantum attacks based on the X.509 certificate format combined with the Falcon signature algorithm.Compared with the digital certificate used in the existing PKI,this scheme can resist quantum attacks under the same classical security level,and the signature and verification efficiency of the digital certificate in this scheme is higher.Compared with other latticebased signature algorithms,the Falcon signature algorithm has the shortest sum of the public key and signature size under the same classical security level and quantum security level,and a shorter key size is beneficial to storage in a digital certificate.Secondly,by adjusting the key generation process of the Falcon signature algorithm,multiple key pairs are generated,and the partial coefficients of the public key in the key pair are combined with the hash function to make the public keys of multiple key pairs correlate,and then get The multiple keys corresponding to the digital certificate can generate a digital certificate chain.Through this solution,users can obtain all digital certificates in the digital certificate chain when applying for a digital certificate from the digital certificate authority CA.This solution can improve the management efficiency of digital certificates and reduce the storage space of digital certificates.Finally,the NTRUEncrypt public key encryption algorithm and the Rainbow signature algorithm are applied to the public key infrastructure,and on this basis,combined with the AES symmetric encryption algorithm,a third-party payment encryption scheme against quantum attacks is proposed.Then implement the prototype system of this scheme,and implement the prototype system based on the classic public key cryptographic algorithm as a comparison to analyze the performance effect of this scheme.Through the test results,a third-party payment encryption scheme based on traditional PKI can be obtained.,While this solution can resist quantum attacks,it is more efficient to complete payments under the same classical security level.