Design And Implementation Of Fabric Security Mechanism Based On National Secret Algorithm

The emergence of Bitcoin has set off a craze for blockchain technology.With the continuous popularization and promotion of blockchain technology,its security issues are increasingly attracting attention.If the security performance of the blockchain cannot be guaranteed,it will affect its future applications and development.The emergence of the Fabric platform meets the diverse needs of specific industries and introduces the experience of pioneers in this field.However,fabric has a very fatal problem in the design of its encryption module.In the latest version 1.4 or even the previous version,it does not provide a set of domestic commercial cryptographic algorithm support,which will greatly hinder the popularity of fabric in China.Further commercial use.In this paper,we first analyze the fabric security mechanism,find defects in the original second-level certificate mechanism scheme,propose improvements to the Tcert certificate generation algorithm,and simplify the Tcert certificate structure,saving certificate storage space and improving The safety performance and efficiency of the second-level certificate mechanism have been introduced.Then,the encryption of the Fabric's encryption module is reformed.First,we need to implement the required set of national encryption algorithms in go language.By analyzing the principles of the SM2,SM3,and SM4 algorithms,we can combine golang with the mathematical operation functions that need to be used.The standard library implements,and then defines related data structures such as keys,etc.,and implements an interface for external calls.The accuracy of the implemented national secret algorithm is verified by using test data published in official documents.Then based on the original fabric encryption module,the original encryption module is expanded with the national encryption algorithm to make the fabric security mechanism more perfect.Finally,the security performance of the expanded fabric platform is analyzed,and the national encryption algorithm is compared with the original encryption algorithm.Two algorithms of the same type before and after replacement are tested for performance.It is finally found that after the national encryption algorithm is replaced,the performance has increased.It not only meets the regulatory requirements of the State Secret Bureau,but also meets the application performance requirements of the industry market.