首页|期刊导航|网络与信息安全学报|基于基域表示的SM9高次扩域运算优化

基于基域表示的SM9高次扩域运算优化OA

Optimization of high-degree extension field operations in SM9 based on base field representation

中文摘要英文摘要

国密算法SM9是我国自主研发的基于标识的密码体制,其性能瓶颈主要存在于底层的高次扩域运算.传统的塔式扩张法在实现高次扩域上的乘法、平方、求逆和Frobenius映射等运算时,存在多层逐级计算带来的冗余开销,限制了算法整体效率的提升.针对这一问题,提出一种基于基域表示的高次扩域运算优化方法.通过理论推导,建立了高次扩域上各项运算的基域表达式,将高次扩域运算转化为基域上的大整数运算,避免了塔式扩张过程的大量中间层级开销.理论分析表明,该方法通过分配律优化、合并同类项,使模运算量减少2/3以上,其他运算同步简化.测试结果显示,采用基域表示法的各项高次扩域运算速率达到塔式扩张法的2~3倍,内存开销峰值降低13.30%~63.60%.进一步地,在SM9数字签名、密钥交换、加密等7项算法中,性能提升幅度达95.39%~158.36%.基域表示法在保持算法数学等价性与安全性的前提下,能够显著提升SM9及其衍生密码方案的执行效率与资源利用率,且该方法具有通用性,可推广至SM9以外的高次扩域运算场景.

The domestic cryptographic algorithm SM9,which is an independently innovated identity-based crypto-graphic system in China,was limited by performance bottlenecks in its underlying high-degree extension field opera-tions.In the traditional tower extension method,operations such as multiplication,squaring,inversion,and Frobenius mapping on high-degree extension fields involved redundant computational overhead due to multi-level hierarchical processing,which constrained the overall efficiency improvement of the algorithm.To address this issue,a base field representation method was proposed for optimizing high-degree extension field operations.Through theoretical deri-vation,base field expressions for various operations on high-degree extension fields were established,transforming these operations directly into large integer arithmetic on the base field and thereby avoiding the substantial intermedi-ate layer overhead inherent in the tower extension process.Theoretical analysis demonstrated that,through distribu-tive law optimization and combination of like terms,modular operations were reduced by over two-thirds,with other operations simplified accordingly.Experimental results show that the proposed base field representation achieves a speedup of 2~3 times for various high-degree extension field operations compared to the tower extension method,with peak memory consumption reduced by 13.30%~63.60%.Furthermore,performance improvements of 95.39%~158.36%were observed in seven SM9 algorithms including digital signature,key exchange,and encryption.The base field representation method significantly enhances the execution efficiency and resource utilization of SM9 and its derived cryptographic schemes while preserving mathematical equivalence and security.Moreover,this method exhibits generality and can be extended to other high-degree extension field scenarios beyond SM9.

谢振杰;刘胜利;赵方方;王智超

信息工程大学网络空间安全教育部重点实验室,河南 郑州 450001||中国人民解放军78156部队,重庆 400039信息工程大学网络空间安全教育部重点实验室,河南 郑州 450001信息工程大学网络空间安全教育部重点实验室,河南 郑州 450001信息工程大学网络空间安全教育部重点实验室,河南 郑州 450001

信息技术与安全科学

高次扩域基域表示SM9算法塔式扩张双线性对

high-degree extension fieldbase field representationSM9 algorithmtower extensionbilinear pairing

《网络与信息安全学报》 2026 (2)

83-89,7

装备预先研究项目(No.30603010601) The Equipment Pre Research Project(No.30603010601)

10.11959/j.issn.2096-109x.AQ25187

评论