一种基于SM2的支持门限修改的数字签名方案

doi:10.19678/j.issn.1000-3428.0070282

计算机工程 ›› 2026, Vol. 52 ›› Issue (7): 255-264. doi: 10.19678/j.issn.1000-3428.0070282

一种基于SM2的支持门限修改的数字签名方案

周权¹, 谢淑婷¹, 曾志康¹, 陈丽丽², 卢子冲²

1. 广州大学数学与信息科学学院, 广东广州 510006;
2. 广州大学计算机科学与网络工程学院, 广东广州 510006

收稿日期:2024-08-22 修回日期:2024-12-21 出版日期:2026-07-15 发布日期:2025-03-07
作者简介:周权,男,副教授、博士,主研方向为可信计算、传感器网络安全、云计算安全;谢淑婷(通信作者),硕士研究生,E-mail:s.t.xie@foxmail.com;曾志康,博士研究生;陈丽丽、卢子冲,硕士研究生。
基金资助:
国家重点研发计划(2021YFA1000600);国家自然科学基金(12171114);广州大学研究生创新能力培养项目(JCCX2024-012)。

SM2-based Digital Signature Scheme Supporting Threshold Modification

ZHOU Quan¹, XIE Shuting¹, ZENG Zhikang¹, CHEN Lili², LU Zichong²

1. School of Mathematics and Information Sciences, Guangzhou University, Guangzhou 510006, Guangdong, China;
2. School of Computer Science and Cyber Engineering, Guangzhou University, Guangzhou 510006, Guangdong, China

Received:2024-08-22 Revised:2024-12-21 Online:2026-07-15 Published:2025-03-07

摘要/Abstract

摘要： 现有的数字签名方案在电子商务、金融交易、医疗系统等场景中广泛应用,但无法在保持签名不变时对已签名的消息内容进行修改,而重复进行签名操作会提高复杂性和延迟。对此,提出一种基于SM2算法并支持门限修改的数字签名方案SM2-TM。该方案支持以门限的方式协同修改已签名的消息内容,并通过参数控制与构造哈希碰撞来实现签名的不变性。此外,它有效解决了复杂的证书存储和管理以及密钥托管问题。隐私与安全性分析结果表明,SM2-TM方案具有不可伪造性、不变性、可追踪性等。性能分析结果表明,SM2-TM方案在计算开销上具有一定优势,在公/私钥及签名的存储开销上也有显著优势,存储开销分别仅为64、32和64 Byte。

关键词: SM2算法, 数字签名, 门限修改, 无证书, 不变性

Abstract: Existing digital signature schemes are widely used in e-commerce, financial transactions, and medical systems. However, they cannot modify the content of signed messages while keeping the signature unchanged. Moreover, repeatedly performing signature operations increases complexity and latency. To address this issue, a digital signature scheme based on the SM2 algorithm and a supporting threshold modification, called SM2-TM, is proposed. This scheme supports the collaborative modification of signed message content in a threshold manner and achieves signature immutability through parameter control and the construction of hash collisions. Furthermore, it effectively solves complex certificate storage and management as well as key escrow issues. Privacy and security analyses results show that the SM2-TM scheme possesses unforgeability, immutability, and traceability. The performance analysis results indicate that the SM2-TM scheme has certain advantages in terms of computational overhead and significant advantages in terms of the storage overhead of public keys, private keys, and signatures, with storage overheads of only 64, 32, and 64 Byte, respectively.

Key words: SM2 algorithm, digital signature, threshold modification, certificateless, invariance

中图分类号:

TP309

周权, 谢淑婷, 曾志康, 陈丽丽, 卢子冲. 一种基于SM2的支持门限修改的数字签名方案[J]. 计算机工程, 2026, 52(7): 255-264.

ZHOU Quan, XIE Shuting, ZENG Zhikang, CHEN Lili, LU Zichong. SM2-based Digital Signature Scheme Supporting Threshold Modification[J]. Computer Engineering, 2026, 52(7): 255-264.

https://www.ecice06.com/CN/Y2026/V52/I7/255

参考文献

[1] 刘邦桂, 曾思财. 电子政务中身份认证技术的研究与实现[J]. 软件工程, 2021, 24(11): 47-50. LIU B G, ZENG S C. Research and implementation of identity authentication technology in e-government[J]. Software Engineer, 2021, 24(11): 47-50. (in Chinese)
[2] YANG Y, YI B X, ZHAN Y H, et al. Secure EHR sharing scheme based on limited sanitizable signature[EB/OL].[2024-08-05]. https://link.springer.com/chapter/10.1007/978-981-19-8445-7_19.
[3] ZHAN Y H, YI B X, YANG Y, et al. A privilege-constrained sanitizable signature scheme for e-health systems[J]. Journal of Systems Architecture, 2023, 142: 102939.
[4] 王浩, 胡艳珂, 郜勇. 医院移动电子签名的应用研究[J]. 中国卫生信息管理杂志, 2023, 20(3): 471-474, 481. WANG H, HU Y K, GAO Y. Research on the application of hospital mobile electronic signature[J]. Chinese Journal of Health Informatics and Management, 2023, 20(3): 471-474, 481. (in Chinese)
[5] LIU X X, ZHANG M H, ZHENG Y P, et al. A linkable ring signature electronic cash scheme based on blockchain[C]//Proceedings of the 3rd International Conference on Smart Block Chain (SmartBlock). Washington D.C.,USA:IEEE Press,2021: 1-4.
[6] LIN I C, CHANG C C, CHIANG H C. A novel e-cash payment system with divisibility based on proxy blind signature in web of things[J]. IEICE Transactions on Information and Systems, 2022(12): 2092-2103.
[7] WANG C H. An identity-based fair contract signing protocol constructed by the confirmation signature[C]//Proceedings of the IEEE Conference on Dependable and Secure Computing (DSC). Washington D.C.,USA:IEEE Press,2019: 1-6.
[8] ZUO L M, ZHANG M L, ZHANG T T, et al. A blind signature scheme with disclaimer contract in the standard model[EB/OL].[2024-08-05]. https://link.springer.com/chapter/10.1007/978-3-030-00009-7_37.
[9] 曹素珍, 王斐, 郎晓丽, 等. 基于无证书的多方合同签署协议[J]. 电子与信息学报, 2019, 41(11): 2691-2698. CAO S Z, WANG F, LANG X L, et al. Multi-party contract signing protocol based on certificateless[J]. Journal of Electronics[WT《Times New Roman》]& Information Technology, 2019, 41(11): 2691-2698. (in Chinese)
[10] 国家密码管理局. SM2密码算法使用规范: GM/T0009-2012[S]. 北京: 国家密码管理局, 2012. State Cryptography Administration. SM2 cryptography algorithm application specification: GM/T0009-2012[S]. Beijing: State Cryptography Administration, 2012. (in Chinese)
[11] GRIERSON S, BUCHANAN W J, THOMSON C, et al. Scalable multi-domain trust infrastructures for segmented networks[C]//Proceedings of the 28th IEEE International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD). Washington D.C.,USA:IEEE Press,2024: 182-187.
[12] JEYASHEELA R M J, GEETHA K. Secure decentralized public key infrastructure with multi-signature in blockchains[EB/OL].[2024-08-05]. https://link.springer.com/chapter/10.1007/978-981-15-7345-3_38.
[13] 杨小东, 李梅娟, 任宁宁, 等. 一种基于无证书的多方合同签署协议的安全性分析与改进[J]. 电子与信息学报, 2022, 44(10): 3627-3634. YANG X D, LI M J, REN N N, et al. Security analysis and improvement of a multi-party contract signing protocol based on certificateless[J]. Journal of Electronics[WT《Times New Roman》]& Information Technology, 2022, 44(10): 3627-3634. (in Chinese)
[14] YU H F, FU S F, LIU Y X, et al. Certificateless broadcast multisignature scheme based on MPKC[J]. IEEE Access, 2020, 8: 12146-12153.
[15] YU H F, WANG Z C. Certificateless blind signcryption with low complexity[J]. IEEE Access, 2019, 7: 115181-115191.
[16] FENG M Q, LIN C, WU W, et al. SM2-DualRing: efficient SM2-based ring signature schemes with logarithmic size[J]. Computer Standards[WT《Times New Roman》]& Interfaces, 2024, 87: 103763.
[17] DING F, LONG Y H, WU P L. Study on secret sharing for SM2 digital signature and its application[C]//Proceedings of the 14th International Conference on Computational Intelligence and Security (CIS). Washington D.C.,USA:IEEE Press,2018: 205-209.
[18] XIAO Y C, ZHANG L, YANG Y F, et al. Provably secure multi-signature scheme based on the standard SM2 signature scheme[J]. Computer Standards[WT《Times New Roman》]& Interfaces, 2024, 89: 103819.
[19] ZHANG Y D, HE D B, ZHANG F G, et al. An efficient blind signature scheme based on SM2 signature algorithm[EB/OL].[2024-08-05]. https://link.springer.com/chapter/10.1007/978-3-030-71852-7_25.
[20] HE C, ZHANG B, ZHANG L, et al. Pairing-free certificateless signature scheme based on SM2 algorithm[EB/OL].[2024-08-05]. https://link.springer.com/chapter/10.1007/978-981-97-4519-7_21.
[21] HE C, ZHANG B, ZHANG L, et al. Improving throughput of mobile sensors via certificateless signature supporting batch verification[J]. Electronics, 2023, 12(22): 1-11.
[22] LIU S G, LIU Z T, LIANG J Q, et al. A secure certificateless ring signcryption scheme based on SM2 algorithm in smart grid[J]. Computer Communications, 2024, 218: 188-197.
[23] DING Y J, ZHANG Y N, ZHOU T P. Continual leakage resilient SM2 signature scheme[C]//Proceedings of the 3rd International Conference on Unmanned Systems (ICUS). Washington D.C.,USA:IEEE Press,2020: 931-936.
[24] 范琳琳. 基于SM2门限密钥分散的电子签名系统研究与实现[D]. 绵阳: 西南科技大学, 2018. FAN L L. Research and implementation of electronic signature system based on SM2 threshold key dispersion[D]. Mianyang: Southwest University of Science and Technology, 2018. (in Chinese)
[25] SHAMIR A. How to share a secret[J]. Communications of the ACM, 1979, 22(11): 612-613.
[26] CHEN X F, ZHANG F G, TIAN H B, et al. Discrete logarithm based chameleon hashing and signatures without key exposure[J]. Computers[WT《Times New Roman》]& Electrical Engineering, 2011, 37(4): 614-623.
[27] KOBLITZ N. Elliptic curve cryptosystems[J]. Mathematics of Computation, 1987, 48(177): 203-209.
[28] POINTCHEVAL D, STERN J. Security arguments for digital signatures and blind signatures[J]. Journal of Cryptology, 2000, 13(3): 361-396.
[29] HUANG K, ZHANG X S, MU Y, et al. Building redactable consortium blockchain for industrial Internet-of-Things[J]. IEEE Transactions on Industrial Informatics, 2019, 15(6): 3670-3679.
[30] BONEH D, LYNN B, SHACHAM H. Short signatures from the Weil pairing[J]. Journal of Cryptology, 2004, 17(4): 297-319.

选择文件类型/文献管理软件名称

选择包含的内容

一种基于SM2的支持门限修改的数字签名方案

SM2-based Digital Signature Scheme Supporting Threshold Modification

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价

[1]	李岩, 孙久兴, 陈昕, 薛一鸣, 刘戬. 紧凑的Aigis数字签名和密钥封装的软硬件协同实现[J]. 计算机工程, 2026, 52(7): 277-286.
[2]	杨兴宇, 周骅, 田有亮, 杨科迪. 基于软硬协同的元宇宙身份安全认证方案[J]. 计算机工程, 2026, 52(6): 214-225.
[3]	高雨菲, 贾鑫, 黄张驰, 许志男, 霍鹏飞, 陆芷茵. 基于旋转不变区域一致性的双视图点云重建方法[J]. 计算机工程, 2026, 52(5): 239-249.
[4]	朱炳丞, 周凤, 田有亮, 向阿新, 熊伟, 彭长根. 基于SM2算法的无证书多重签名及其在区块链交易中的应用[J]. 计算机工程, 2026, 52(4): 290-301.
[5]	邓淼磊, 马晴雨, 宋庆, 张春燕, 左志斌. 增强的无线传感器网络认证密钥协商协议[J]. 计算机工程, 2025, 51(11): 186-193.
[6]	杨小东, 李沐紫, 马国祖, 李松谕, 王彩芬. 车联网中支持非法签名定位的无证书匿名认证方案[J]. 计算机工程, 2024, 50(6): 157-165.
[7]	郭瑞, 胡国梁, 王俊茗. 车联网中可匿名的无证书聚合签名方案[J]. 计算机工程, 2024, 50(11): 207-222.
[8]	陈福安, 柳毅. 基于区块链的V2G无证书环签密隐私保护方案[J]. 计算机工程, 2023, 49(6): 34-41,52.
[9]	王翊丞, 郭瑞, 蒙彤, 刘颖菲. 智能电网中基于代理盲签密的隐私保护方案[J]. 计算机工程, 2023, 49(5): 150-164.
[10]	李斌, 吴坡, 王丹, 安浩杨, 何德彪. 一种适用于电力终端设备的无证书在线/离线签密方案[J]. 计算机工程, 2023, 49(12): 146-151, 160.
[11]	杜田, 李欣, 赖成喆, 郑东. 面向无人驾驶地图更新的安全信任管理方案[J]. 计算机工程, 2022, 48(6): 154-166.
[12]	许嘉麟, 姚双, 张蕊华, 许浩, 沈洋. 基于亲疏度矩阵的点云置换不变特征提取方法[J]. 计算机工程, 2022, 48(6): 243-250.
[13]	胡璇, 邢凯, 李亚鸣, 王志勇, 邓洪武. 基于因果干预与不变性的卷积预训练模型优化研究[J]. 计算机工程, 2022, 48(4): 89-98.
[14]	陈虹, 侯宇婷, 郭鹏飞, 周沫, 赵菊芳, 肖成龙. 可公开验证的高效无证书聚合签密方案[J]. 计算机工程, 2022, 48(10): 146-157.
[15]	刘期烈, 陈澄. 基于区块链的V2G匿名身份认证方案[J]. 计算机工程, 2021, 47(11): 22-28.

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

一种基于SM2的支持门限修改的数字签名方案

SM2-based Digital Signature Scheme Supporting Threshold Modification

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价