Author Login Chief Editor Login Reviewer Login Editor Login Remote Office

Computer Engineering ›› 2026, Vol. 52 ›› Issue (4): 290-301. doi: 10.19678/j.issn.1000-3428.0070317

• Cyberspace Security • Previous Articles     Next Articles

Certificateless Multi-Signature Based on SM2 Algorithm and Its Application in Blockchain Transaction

ZHU Bingcheng1,2,3,4, ZHOU Feng2,*(), TIAN Youliang1,2,3,4, XIANG Axin1,2,3,4, XIONG Wei1, PENG Changgen1,2,3,4   

  1. 1. State Key Laboratory of Public Big Data, Guizhou University, Guiyang 550025, Guizhou, China
    2. College of Computer Science and Technology, Guizhou University, Guiyang 550025, Guizhou, China
    3. Institute of Cryptography and Data Security, Guizhou University, Guiyang 550025, Guizhou, China
    4. Guizhou Province Key Laboratory of Cryptography and Blockchain Technology, Guiyang 550025, Guizhou, China
  • Received:2024-09-03 Revised:2024-10-10 Online:2026-04-15 Published:2024-12-13
  • Contact: ZHOU Feng

基于SM2算法的无证书多重签名及其在区块链交易中的应用

朱炳丞1,2,3,4, 周凤2,*(), 田有亮1,2,3,4, 向阿新1,2,3,4, 熊伟1, 彭长根1,2,3,4   

  1. 1. 贵州大学公共大数据国家重点实验室, 贵州 贵阳 550025
    2. 贵州大学计算机科学与技术学院, 贵州 贵阳 550025
    3. 贵州大学密码学与数据安全研究所, 贵州 贵阳 550025
    4. 贵州省密码学与区块链技术特色重点实验室, 贵州 贵阳 550025
  • 通讯作者: 周凤
  • 作者简介:

    朱炳丞, 男, 硕士研究生, 主研方向为密码学与安全协议、隐私保护技术

    周凤(通信作者), 副教授

    田有亮, 教授、博士生导师

    向阿新, 博士研究生

    熊伟, 讲师

    彭长根, 教授、博士生导师

  • 基金资助:
    国家重点研发计划(2022YFB2701400); 国家自然科学基金(62272123); 贵州省高层次创新型人才项目(黔科合平台人才6008); 贵州省科技计划项目(黔科合平台人才5017); 贵州省科技计划项目(黔科合支撑一般065); 贵州省科技计划项目(黔科合战略找矿ZD001); 贵阳市科技计划项目(筑科合2-4)

Abstract:

Multi-signature is widely used in blockchain transaction schemes. Despite increasing demand for the localization of blockchain applications, research on multi-signature has not sufficiently focused on secure and efficient SM2 algorithms. Additionally, most existing solutions rely on the Public Key Infrastructure (PKI) system to implement certificate management, which poses efficiency and scalability issues. Therefore, this study proposes a certificateless multi-signature scheme based on the SM2 algorithm. First, in the SM2 key generation stage, a certificateless cryptographic mechanism is introduced to avoid expensive certificate management, and a key holding proof is designed to resist malicious key attacks. Second, by introducing a tree structure, an "online-offline" SM2 multi-signature algorithm is designed to achieve efficient and highly scalable signature generation. The scheme is proven to satisfy the Existential UnForgeability under Chosen Message Attacks (EUF-CMA) in a Random Oracle Model (ROM). Finally, the proposed solution is applied to the Hyperledger Fabric consortium chain to optimize the blockchain transaction process. Results of a performance analysis show that, compared with existing signature schemes, the proposed scheme is more effective in reducing computational and communication overhead while ensuring security.

Key words: blockchain, multi-signature, SM2 algorithm, certificateless cryptography, Random Oracle Model (ROM)

摘要:

多重签名广泛应用于区块链交易方案, 随着区块链应用国产化需求的不断增长, 安全高效的SM2算法日益缺少多重签名方面的研究。此外, 现有方案大多依赖公钥基础设施(PKI)体系来实现证书管理, 存在效率和可扩展性问题。为此, 提出一种基于SM2算法的无证书多重签名方案。首先, 在SM2密钥生成阶段引入无证书密码机制, 避免代价高昂的证书管理, 设计密钥持有证明, 抵御恶意密钥攻击; 其次, 通过引入树形结构, 设计"线上-线下"的SM2多重签名算法, 实现签名生成的高效性和高可扩展性, 并在随机预言机模型(ROM)下证明该方案满足选择消息攻击下的存在性不可伪造性(EUF-CMA); 最后, 将所提方案应用于Hyperledger Fabric联盟链, 优化区块链交易流程。性能分析结果表明, 与现有签名方案相比, 所提方案在保证安全性的前提下, 有效降低了计算开销和通信开销。

关键词: 区块链, 多重签名, SM2算法, 无证书密码, 随机预言机模型