Cryptography is the core technology and fundamental support for ensuring network security, playing an irreplaceable role in maintaining national security, promoting economic and social development, and protecting the interests of the people. The vigorous development of “cloud, IoT, mobility, big data, and AI” and the full promotion of 5G, smart cities, and Internet + government services rely on cryptographic technology to ensure network security, protect data security, and guarantee online integrity. This requires deep cooperation between cryptography and other disciplines, integration of the cryptography industry with other industries, sincere collaboration among industry, academia, research, and management, and the collective dissemination of cryptographic knowledge and policies by society, as well as research into cryptographic application technologies and the promotion of cryptographic application solutions.
Application of Cryptographic Technology in 5G Security
Abstract: With the improvement of the fifth-generation mobile communication (5G) technology standards, 5G has received unprecedented attention in various fields. However, 5G still faces some security challenges. This article points out suitable cryptographic technology solutions for the access security and data security issues of 5G terminals. For access authentication issues, certificate-less cryptographic systems, homomorphic encryption-based data aggregation mechanisms, and identity-based aggregate signature schemes can be used. For data storage and sharing security issues, attribute-based encryption and key leakage-resistant technologies can be employed. With the commercialization of 5G, the aforementioned cryptographic technologies and 5G security research will have significant theoretical and practical significance.
Content Directory:
1 Cryptographic Technologies in 5G Security
1.1 Certificate-less Cryptographic Systems
1.2 Homomorphic Encryption-based Data Aggregation Technologies
1.3 Aggregate Signature Technologies
1.4 Attribute-based Encryption Technologies
1.5 Key Leakage-resistant Encryption Technologies
2 Application of Cryptographic Technology in 5G Security
2.1 Application of Certificate-less Cryptographic Systems in 5G IoT Data Security Collection
2.2 Application of Homomorphic Encryption in 5G Smart Grid Power Security Recovery
2.3 Application of Aggregate Signature Technologies in 5G Large-scale IoT Device Access Authentication
2.4 Application of Attribute-based Encryption Technologies in Cloud Storage Security
2.5 Application of Key Leakage-resistant Cryptographic Technologies in Data Security
Original Reading:https://mp.weixin.qq.com/s/tTnBXk4pMai_YvaOPDhgXQ
Current Status and Development Strategies of Commercial Cryptography Management in China
Abstract:With the rapid development of information technology, the network environment is becoming increasingly complex, and the security situation is changing rapidly. The scope and connotation of network security threats are constantly expanding and evolving, and the network security challenges faced by China are becoming increasingly severe. “Without network security, there is no national security.” As a core technology for achieving network security, commercial cryptographic technology plays an important foundational role in network security protection work. This article focuses on the current status of commercial cryptography management in China, studying policies and regulations, standards, technical strength, and industrial development, analyzing the challenges in commercial cryptography management, and proposing corresponding suggestions and measures to provide useful references for commercial cryptography management work.Content Directory:1 Current Status of Commercial Cryptography Management1.1 Continuous Improvement of Policy and Regulatory Framework, Establishment of Cryptography Management System1.2 Gradual Establishment of Standard System, Promoting Standardized Management of Commercial Cryptography1.3 Continuous Improvement of Commercial Cryptography Technical Strength, Abundant Achievements in Technological Innovation1.4 Flourishing Development of the Commercial Cryptography Industry, Initial Results in Cryptographic Applications1.5 Gradual Establishment of Commercial Cryptography Testing and Certification System, Effectively Supporting the Advancement of Commercial Cryptography Applications2 Challenges Faced by Commercial Cryptography Management3 Suggestions for Commercial Cryptography Management in China3.1 Establish and Improve the Cryptography Management System3.2 Continuously Improve the Standardization System3.3 Strengthen Independent Innovation in Cryptographic Technology3.4 Optimize the Ecological Environment of the Commercial Cryptography Industry3.5 Focus on Improving Talent Training MechanismsOriginal Reading:https://mp.weixin.qq.com/s/vCe0iw0YeagN7mpIhmA1RA
Research on Cryptographic Technology in the Context of Big Data
Abstract:With the continuous development of the informationization process of society, more and more smart terminals are being used, resulting in an enormous amount of data, which has promoted the arrival of the big data era. Big data has a huge driving effect on various industries of the entire country and society, but it also brings severe problems—user personal privacy leakage issues, which involve national social security, political security, and military security. Therefore, this article analyzes the security risks of big data privacy protection, combining searchable encryption, fully homomorphic encryption, secure multi-party computation, and other technologies to summarize and analyze the cryptographic field in the big data environment and discuss its application prospects.Content Directory:1 Security Risks in the Big Data Environment2 Searchable Encryption Technology3 Secure Multi-party Computation Technology4 Fully Homomorphic Encryption Technology5 Prospects for Cryptographic Technology in the Big Data EnvironmentOriginal Reading:https://mp.weixin.qq.com/s/h_nj0v1yCk81XjHL9vQF7g
SWOT Analysis of Commercial Cryptography Application Development in Hainan Free Trade Port
Abstract: With the introduction of the “Overall Plan for the China (Hainan) Free Trade Pilot Zone” and the “Smart Hainan Overall Plan (2020-2025),” the construction of Hainan Free Trade Port has entered the fast lane, and the digital economy will become an important means for the Free Trade Port to achieve high-quality development. The application of commercial cryptography is an important protective measure for safeguarding digital economic construction. Developing commercial cryptography applications with Hainan Free Trade Port characteristics requires adapting to the security needs of digital development, identifying development directions, and reflecting the advantages of pioneering trials. Using the SWOT method for analysis, this article identifies internal strengths and weaknesses, analyzes external opportunities and challenges, and proposes targeted suggestions.Content Directory:1 Analysis of Development Advantages (S)1.1 Advantages of Cryptography Policies1.2 Advantages of Pilot Trials on Outlying Islands2 Analysis of Development Disadvantages (W)2.1 Weak Foundation of the Commercial Cryptography Industry2.2 Insufficient Scope and Depth of Commercial Cryptography Applications2.3 Lack of Innovation Chain in Commercial Cryptography3 Analysis of Development Opportunities (O)3.1 Opportunities for Institutional Innovation3.2 Opportunities for Digital Construction3.3 Opportunities for Connecting with the International Commercial Cryptography Market4 Analysis of Development Challenges (T)4.1 Regulatory Challenges from a Highly Open Environment4.2 Network Security Risks from Data Centralization4.3 Management of Cross-border Data4.4 Challenges of New Technologies and New Scenarios for Commercial Cryptography Applications5 Development Suggestions5.1 Identify the Positioning of the Industrial Chain, Promote the Ubiquity of Commercial Cryptography5.2 Strengthen the Regulation of Commercial Cryptography Applications, Effectively Control Risks5.3 Develop a Commercial Cryptography Guarantee System with Data Security CharacteristicsOriginal Reading:https://mp.weixin.qq.com/s/CqlQFjT5Re-Z9hqwtVQlEQ
Security Challenges of Domestic Cryptographic Algorithm Software Engines
Content Directory:1 Promotion of Domestic Commercial Cryptography Technology2 Security Challenges of Domestic Cryptographic Algorithm Software Engines2.1 Challenges of Random Number Generators2.2 Challenges of Key Security3 Current Status and Issues of Software Engine TestingOriginal Reading:https://mp.weixin.qq.com/s/Nj8v4MAjyaxgl4ctnz-ReA
Innovations in Cryptographic Applications to Support Government Informationization Construction
Abstract: In recent years, the country has vigorously promoted the construction of government informationization, leveraging technologies such as big data, cloud computing, and artificial intelligence to improve administrative service efficiency. However, government information systems have gradually become the focus of cyberattacks, with frequent incidents of sensitive government data and citizens’ privacy information being leaked, which can affect the work of government departments, disrupt people’s daily lives, and even threaten national security. Cryptography is currently recognized as the most effective, reliable, and economical core technology for ensuring information security. Addressing the cryptographic application needs in government informationization construction, promoting technological innovation and comprehensive application of cryptography will effectively enhance the security protection capabilities of government systems and service platforms.Content Directory:1 Background of Cryptographic Applications in Government Informationization Construction1.1 National Policy Requirements1.2 Security Situation of Government Services2 Innovations in Cryptographic Applications for Government Information Integration and Sharing2.1 Framework for Cryptographic Applications in Government Information Integration and Sharing2.2 New Cryptographic Technologies for Government Data Sharing3 Innovations in Cryptographic Applications for “Internet + Government Services”3.1 Framework for Cryptographic Applications in “Internet + Government Services”3.2 Innovations in Cryptographic Applications for Government Information Systems4 Suggestions for Promoting Cryptographic Applications in Government Systems4.1 Compliance with National Cryptographic Application Requirements4.2 Focus on Meeting Actual Security Needs of Government Services4.3 Optimize the Cryptographic User Experience in Government Services4.4 Use New Technologies to Solve New ProblemsOriginal Reading:https://mp.weixin.qq.com/s/mD1mO71cKeWbWZYDqHfU7Q
Research and Design of Ring Signature Scheme Based on SM2 Cryptographic Algorithm
Abstract: There are many types of ring signature algorithms, most of which are designed based on bilinear pairs or the difficulty of factoring large primes, with room for improvement in security and computational speed. Compared to elliptic curve discrete logarithm-based algorithms, the advantages of bilinear pairs are not significant, as they cannot provide the same level of security with keys of the same length. To enhance the security of the scheme and ensure complete anonymity of the signer’s identity, a new ring signature scheme based on the SM2 commercial cryptographic algorithm has been designed. The signature algorithm is designed using a one-way function, and the security of the scheme has been rigorously proven, ensuring the correctness, security, and anonymity of the new scheme.Content Directory:1 Basic Knowledge1.1 SM2 Public Key Cryptographic Algorithm1.2 Elliptic Curves over Finite Fields1.3 Assumptions on the Difficulty of SM2-based Problems1.4 SM3 Cryptographic Hash Algorithm2 Ring Signature Scheme Based on SM2 Algorithm2.1 Initialization Phase2.2 Generation of Ring Signatures for Messages2.3 Legitimacy Verification of Signatures3 Security Analysis3.1 Correctness3.2 Anonymity3.3 UnforgeabilityOriginal Reading:
https://mp.weixin.qq.com/s/K36T1t1Pf0j67QzppGpUGQ
Reflections on Cryptographic Applications in the Digital Economy Era
Abstract: The digital economy, as the driving engine of current economic development in China, promotes rapid economic growth, and the construction of digital society and digital government greatly enhances public service and social governance levels, as well as government governance efficiency. The comprehensive development of digital China raises higher standards and requirements for network security capabilities. In the digital age, it is crucial to build a network security guarantee system centered on data. Cryptography, as the most effective, reliable, and economical key technology and fundamental support for ensuring network security, will accelerate its penetration and integration into various fields of digital economic society, playing an important role in the process of digital transformation and development, and the cryptography industry will also enter a new period of development.Content Directory:1 Cryptography Moving from “Mystery” to Popularization2 Ready to Go, Cryptographic Applications at a New Starting Point2.1 Top-level Planning to Coordinate the Overall Situation, Opening a New Blueprint for Cryptography2.2 Expanding Space in the Digital Economy Era, Building New Business Models for Cryptographic Applications2.3 Technological Integration Breaking Boundaries, Establishing a New Pattern for the Cryptography Industry3 Data-driven, Cryptographic Application Innovations Revitalizing New Opportunities3.1 Operational Services, Creating New Models for Cryptographic Applications3.2 Starting from the “Core,” Building a New System for Basic Software and Hardware Innovation3.3 Software-defined, Expanding New Application Scenarios for Cryptographic Modules4 Multi-pronged Approach, Urgent New Measures Needed for Cryptographic Innovation and Development in the Digital Economy Era4.1 Strengthen the Implementation of Policies and Regulations, Fully Promote the Implementation of Various Deployments4.2 Regional Management and Industry Standards to Promote In-depth Development of Cryptographic Applications in Cyberspace4.3 Build National-level Cryptographic Infrastructure, Fully Safeguard the Development of “New Infrastructure”4.4 Promote the Development of Software Cryptographic Modules, Assist New Cryptographic Service Models to Integrate into Various FieldsOriginal Reading:https://mp.weixin.qq.com/s/35M0WK1lYcowFUN8Vr1JfA
Cryptographic Support Technologies and Applications for Data Security in Government Information Sharing
Abstract: In response to the data security technical requirements involving data classification, cross-domain secure transmission, access control, data desensitization, and data recall and blocking as outlined in the national standard GB/T 39477—2020 “Information Security Technology—Data Security Technical Requirements for Government Information Sharing,” this article proposes a design scheme for a cryptographic support system. It introduces core cryptographic technologies applied in the unified cryptographic support service system, such as IBC identification cryptography, FPE format-preserving encryption, OPE order-preserving encryption, data transparent encryption and decryption, and medium-free cryptographic signature operations, and analyzes the practical application value and role of these cryptographic technologies in the context of government data sharing and exchange.Content Directory:1 Analysis of Cryptographic Technology Needs1.1 Layered and Classified Cryptographic Services as Needed1.2 Cross-domain Encryption and Decryption of Data1.3 Flexible Encryption Strategies1.4 Data Desensitization Still Usable1.5 Compatibility with Existing Cryptographic Facilities2 Design of the Cryptographic Support System for Government Sharing3 Cryptographic Technology Application Schemes3.1 Integrated Model of Cryptographic Systems3.2 Standard Cryptographic Service Functions3.3 Dedicated Cryptographic Service FunctionsOriginal Reading:https://mp.weixin.qq.com/s/UNXCLaaxXDeaSJlF5Q35MA
Research on Email Systems Based on Commercial Cryptographic Technology
Abstract: This article analyzes the industry standards, technical status, security mechanisms, and security threats faced by the email industry. It introduces commercial cryptographic technology into key aspects of email system security channels, user login, and email delivery, proposing security and confidentiality measures that combine email protocols SMTP, IMAP, POP3, SMIME, and commercial cryptographic technology. These measures can address security issues related to secure email access, identity authentication, key negotiation, and email content encryption, making the processes of user login and email delivery more secure and reliable.Content Directory:1 Security Risks of Traditional Email Systems1.1 Network Security Risks1.2 Risks of User Authentication in Email Protocols1.3 Risks of Email Content Leakage, Tampering, and Forgery2 Enhancements to the Security Mechanisms of Email Systems2.1 Commercial Cryptographic Service Platform Based on PKI System2.1.1 Components of the Commercial Cryptographic Service Platform2.1.2 Main Capabilities of the Cryptographic Service SDK2.1.3 Support for Certificate and Key Management by the Cryptographic Service Platform2.2 Enhanced Protection of Email Transmission Channels2.3 Enhanced Protection of Email Transmission Channels2.4 Commercial Cryptographic Protection of Email Content2.4.1 Plaintext Email MIME Format2.4.2 Commercial Cryptographic Signing and Encryption Process for Emails3 Effectiveness Analysis of Security Risk Prevention3.1 Network Security Risks3.2 Risks of User Authentication in Email Protocols3.3 Risks of Email Content Leakage, Tampering, and Forgery
Original Reading:
https://mp.weixin.qq.com/s/j0BHtHCCi8sKUkDQohUyqg