CN115632782B

CN115632782B - Random number generation method, system and equipment based on SM4 counter mode

Info

Publication number: CN115632782B
Application number: CN202211653313.8A
Authority: CN
Inventors: 代政一; 赵光耀; 冯国柱
Original assignee: Hunan Cryptographic Engineering Research Center Co ltd
Current assignee: Hunan Cryptographic Engineering Research Center Co ltd
Priority date: 2022-12-22
Filing date: 2022-12-22
Publication date: 2023-03-21
Anticipated expiration: 2042-12-22
Also published as: CN115632782A

Abstract

The embodiment of the disclosure provides a random number generation method, a system and equipment based on an SM4 counter mode, which belong to the technical field of data processing, and specifically comprise the following steps: step 1, initializing a random number generator; step 2, obtaining initial seed materials from an entropy source; step 3, deriving the initial seed material based on SM4 to obtain a derived seed material; step 4, updating the state of the random number generator by utilizing the derivative seed material; and 5, outputting the random number. By the scheme, the safety of the bottom layer of the cryptographic algorithm is improved.

Description

Random number generation method, system and equipment based on SM4 counter mode

Technical Field

The embodiment of the disclosure relates to the technical field of data processing, in particular to a random number generation method, a random number generation system and random number generation equipment based on an SM4 counter mode.

Background

Recently, new infrastructures such as 6G, mobile internet, big data and cloud computing are rapidly developed, and more application scenarios require cryptographic algorithms to guarantee confidentiality, integrity and authentification of transmitted data. The pseudo-random number generator is used as a bottom-layer component for guaranteeing the safety of the cryptographic algorithm, and the unpredictability of the output of the cryptographic algorithm is guaranteed. Random numbers play an increasingly important role in many interactive negotiation scenarios, such as key generation, key exchange protocols, zero knowledge proof, block chaining, secure multi-party computation, and the like.

The true random number generator takes a random entropy source as input and the output bit sequence is random like a random coin throw. In order to ensure that pseudo random numbers are indistinguishable from true random numbers, an important feature of pseudorandom number generators is randomness and unpredictability. Randomness means that bits of a random number are independent from each other, and each bit is subject to uniform distribution; unpredictability means that a preceding segment and a succeeding segment cannot be deduced from a known sequence segment. Pseudo-random number generators typically seed a random value and produce a sequence of bits using a deterministic algorithm that can replace a true random entropy source to perform the function of generating random numbers if the output sequence is indistinguishable from the true random sequence. The seed is important for a pseudorandom number generator, and once the attacker acquires the seed, it gets the information of all subsequent random numbers.

Therefore, a random number generation method based on the SM4 counter mode with high safety is needed.

Disclosure of Invention

In view of this, embodiments of the present disclosure provide a random number generation method, system and device based on an SM4 counter mode, so as to at least partially solve the problem of poor security in the prior art.

In a first aspect, an embodiment of the present disclosure provides a random number generation method based on an SM4 counter mode, including:

step 1, initializing a random number generator, wherein the random number generator comprises a bit string V, a bit string Key and a reseeding counter;

step 2, obtaining initial seed materials from an entropy source;

step 3, deriving the initial seed material based on SM4 to obtain a derived seed material;

step 4, updating the state of the random number generator by utilizing the derivative seed material;

step 5, outputting a random number;

the step 5 specifically includes:

step 5.1, judging whether the reseeding counter exceeds the reseeding interval or not, if so, executing reseeding operation, otherwise, executing step 5.2;

step 5.2, setting the target seed material as a 0-bit string with 256 bits;

step 5.3, under the action of the current internal state Key value, encrypting the V +1 of the current internal state in the SM4 ECB mode to obtain a 128-bit output result output;

step 5.4, taking the previous requested _ number _ of _ bits of output as the output random number;

and 5.5, updating the states of the target seed material and the current internal state Key and V to obtain a new internal state Key and a new internal state V of the random number generator, and recording the number of times of outputting the random number according to the value of the reseeding counter plus 1.

According to a specific implementation manner of the embodiment of the present disclosure, the step 2 specifically includes:

and (3) performing iteration by using an entropy source round function, converting the pseudo-random number with a preset length, generating a plurality of new random numbers with the same length, and taking all the new random numbers as the initial seed material.

According to a specific implementation manner of the embodiment of the present disclosure, step 3 specifically includes:

step 3.1, filling the initial seed material S, wherein S = byte number | | | of the initial seed material, byte number of the derivative seed material, byte number | | |0x80, where both byte number of the initial seed material and byte number of the derivative seed material are 32 bit numbers, symbol | | | represents connection of a bit string, and when the bit length of S after filling is not a multiple of 128, continuing to fill 0x00 until the bit length of S after filling is a multiple of 128;

step 3.2, selecting a key used in the SM4 CBC mode and a 0-bit string with 96 bits and connecting the initial vector IV with the initial seed material S, where the initial vector IV and the initial seed material S are 0x00000000, and connecting the initial vector IV with the initial seed material S, that is, IVs = IV | | S;

step 3.3, encrypting the IVS in the CBC mode of SM4 by using the secret key, and taking the output 128-bit MAC value as the secret key K in the ECB mode of SM 4;

step 3.4, select the initial vector IV as 0x00000001 to connect to a 96-bit 0-bit string, and also connect IV to S, that is: IVSS = IV | | S;

step 3.5, encrypting the IVSS in the CBC mode of the SM4 by using the secret key, and taking the output 128-bit MAC value as the encrypted data X in the ECB mode of the SM 4;

step 3.6, under the action of the secret key K, encrypting X in the ECB mode of SM4, and outputting a 128-bit value

Is then encrypted

Outputting a 128-bit value

，

I.e. 256 bits of derivative seed material.

According to a specific implementation manner of the embodiment of the present disclosure, the step 4 specifically includes:

step 4.1, under the action of the current state Key value, the encryption V +1 in the ECB mode of the SM4 obtains a 128-bit output result output1;

step 4.2, under the action of the current state Key value, the encryption V +2 in the SM4 ECB mode obtains a 128-bit output result output2;

step 4.3, connecting output1 and output2, and then carrying out exclusive or operation on the obtained product and 256-bit derivative seed materials;

and 4.4, taking the first 128 bits of the obtained result as an updated value of Key and the last 128 bits of the result as an updated value of V.

In a second aspect, an embodiment of the present disclosure provides a random number generation system based on an SM4 counter mode, including:

the initialization module is used for initializing a random number generator, wherein the random number generator comprises a bit string V, a bit string Key and a reseed counter;

an acquisition module to acquire initial seed material from an entropy source;

a derivation module, configured to derive the initial seed material based on SM4, to obtain a derived seed material;

an update module to update a state of the random number generator with the derivative seed material;

the output module is used for outputting the random number;

the output module specifically includes:

step 5.1, judging whether the reseeding counter exceeds the reseeding interval, if so, executing reseeding operation, otherwise, executing step 5.2;

step 5.2, setting the target seed material as a 0-bit string with 256 bits;

In a third aspect, an embodiment of the present disclosure further provides an electronic device, where the electronic device includes:

at least one processor; and the number of the first and second groups,

a memory communicatively coupled to the at least one processor; wherein the content of the first and second substances,

the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the random number generation method based on the SM4 counter mode in the first aspect or any implementation manner of the first aspect.

The random number generation scheme based on the SM4 counter mode in the embodiment of the present disclosure includes: step 1, initializing a random number generator, wherein the random number generator comprises a bit string V, a bit string Key and a reseed counter; step 2, obtaining initial seed materials from an entropy source; step 3, deriving the initial seed material based on SM4 to obtain a derived seed material; step 4, updating the state of the random number generator by utilizing the derivative seed material; step 5, outputting a random number; the step 5 specifically includes: step 5.1, judging whether the reseeding counter exceeds the reseeding interval, if so, executing reseeding operation, otherwise, executing step 5.2; step 5.2, setting the target seed material as a 0-bit string with 256 bits; step 5.3, under the action of the current internal state Key value, encrypting the V +1 of the current internal state in the SM4 ECB mode to obtain a 128-bit output result output; step 5.4, taking the previous requested _ number _ of _ bits of output as the output random number; and 5.5, updating the states of the target seed material and the current internal state Key and V to obtain a new internal state Key and a new internal state V of the random number generator, and recording the number of times of outputting the random number according to the value of the reseeding counter plus 1.

The beneficial effects of the embodiment of the disclosure are: according to the scheme disclosed by the invention, five steps of initializing the random number generator, acquiring entropy source seeds, deriving the seeds based on the SM4, updating the state of the random number generator and outputting the random number are carried out based on the SM4 counter mode, so that the security of the bottom layer of the cryptographic algorithm is improved.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings needed to be used in the embodiments will be briefly described below, and it is apparent that the drawings in the following description are only some embodiments of the present disclosure, and it is obvious for those skilled in the art that other drawings can be obtained according to the drawings without creative efforts.

Fig. 1 is a schematic flowchart of a random number generation method based on an SM4 counter mode according to an embodiment of the present disclosure;

FIG. 2 is a schematic flow chart of an entropy source round-robin provided in an embodiment of the present disclosure;

FIG. 3 is a schematic diagram illustrating an operation flow of an F function in an entropy source round function according to an embodiment of the present disclosure;

fig. 4 is a schematic structural diagram of a random number generation system based on an SM4 counter mode according to an embodiment of the present disclosure;

fig. 5 is a schematic view of an electronic device provided in an embodiment of the present disclosure.

Detailed Description

The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

The embodiments of the present disclosure are described below with specific examples, and other advantages and effects of the present disclosure will be readily apparent to those skilled in the art from the disclosure in the specification. It is to be understood that the embodiments described are only a few embodiments of the present disclosure, and not all embodiments. The disclosure may be embodied or carried out in various other specific embodiments, and various modifications and changes may be made in the details within the description without departing from the spirit of the disclosure. It is to be noted that the features in the following embodiments and examples may be combined with each other without conflict. All other embodiments, which can be derived by a person skilled in the art from the embodiments disclosed herein without making any creative effort, shall fall within the protection scope of the present disclosure.

It is noted that various aspects of the embodiments are described below within the scope of the appended claims. It should be apparent that the aspects described herein may be embodied in a wide variety of forms and that any specific structure and/or function described herein is merely illustrative. Based on the disclosure, one skilled in the art should appreciate that one aspect described herein may be implemented independently of any other aspects and that two or more of these aspects may be combined in various ways. For example, an apparatus may be implemented and/or a method practiced using any number of the aspects set forth herein. Additionally, such an apparatus may be implemented and/or such a method may be practiced using other structure and/or functionality in addition to one or more of the aspects set forth herein.

It should be noted that the drawings provided in the following embodiments are only for illustrating the basic idea of the present disclosure, and the drawings only show the components related to the present disclosure rather than the number, shape and size of the components in actual implementation, and the type, amount and ratio of the components in actual implementation may be changed arbitrarily, and the layout of the components may be more complicated.

In addition, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, it will be understood by those skilled in the art that the aspects may be practiced without these specific details.

The embodiment of the disclosure provides a random number generation method based on an SM4 counter mode, and the method can be applied to the encryption process of an internet scene.

Referring to fig. 1, a schematic flow chart of a random number generation method based on an SM4 counter mode according to an embodiment of the present disclosure is provided. As shown in fig. 1, the method mainly comprises the following steps:

in specific implementation, the internal state working _ state of the random number generator may be composed of three parts: v, key, and rest _ counter, which are defined as follows:

a) Bit string V: the length is 128 bits, and updating is carried out when a group of random numbers with the length of 128 bits are generated;

b) Bit string Key: the length is 128 bits, and the random number is updated when a preset group number of random numbers are generated;

c) Reseed _ counter: the number of times the random number is requested is recorded and updated after initialization or seed update.

The self-designed entropy source used in the initialization process generates a new 128-bit random number by transforming a 128-bit pseudo-random number in a series of transformations, wherein the 128-bit pseudo-random number can be given by a user or generated by calling a system rand () function, and then initializes the relevant state information of the random number generator, namely a bit string V, a bit string Key and a reseed counter, by using the pseudo-random number.

Step 2, obtaining initial seed materials from an entropy source;

further, the step 2 specifically includes:

In specific implementation, as shown in fig. 2, iteration is performed by using an entropy source round function, specifically, a 128-bit input is first divided into 4 blocks, each block has 32 bits, and 20 round function iterations shown in fig. 2 are performed, where an F function is performed as follows:

firstly, the first step is to

And

performing XOR operation, and summing the results

Make mould

The addition operation, namely:

；

secondly, will

Performing a linear operation;

wherein<<<Operation representation bit string

Performing cyclic left shift operation;

finally will

XOR with the number of rounds and then AND

Make mould

The addition operation, namely:

；

the F function operation flow is as shown in fig. 3, the iteration round function has 20 rounds, the output is 128 bits, the iteration output result of 20 rounds is used as part of the initial seed material, and the initial seed material can be generated by calling the entropy source twice. If a user needs more seed materials, the entropy source round function is called for many times to generate enough seed materials, and fig. 2 and fig. 3 show a transformation mode and a round function used in the process from the bit value acquired by the entropy source to the generation of the seed materials. The 128 bits obtained from the entropy source are divided into 4 blocks of 32 bits each, and the input of the round function is

The wheel function output is

Iterate 20 rounds, wherein

Indicating the current round value.

on the basis of the above embodiment, the step 3 specifically includes:

step 3.1, filling the initial seed material S, wherein S = byte number | | | of the initial seed material, byte number of the derivative seed material, | seed material value | |0x80, where both the byte number of the initial seed material and the byte number of the derivative seed material are 32 bits, and the symbol | | represents connection of bit strings, and when the bit length of S after filling is not a multiple of 128, continuing to fill 0x00 until the bit length of S after filling is a multiple of 128;

step 3.2, selecting a key used in the SM4 CBC mode and a 0-bit string with 96 bits and connecting the initial vector IV with the initial seed material S, where the initial vector IV and the initial seed material S are 0x00000000, and connecting the initial vector IV and the initial seed material S, that is, IVs = IV | | S;

step 3.3, encrypting the IVS in the CBC mode of SM4 by using the key, and taking the output 128-bit MAC value as the key K in the ECB mode of SM 4;

And then encrypted

Outputting a 128-bit value

，

I.e. 256 bits of derivative seed material.

In specific implementation, the SM4 algorithm is the first commercial block cipher standard published by the government in 2006 and 2 months, and is a cipher algorithm recommended to be used by the security standard of the wireless local area network in china. The packet length and the key length are both 128 bits, and an unbalanced Feistel structure is adopted, so that the encryption and decryption speed is high, the realization performance is high, and the like. The random number generator used in the patent is a random number generator based on an SM4 counter mode and independently designed for a domestic system, a domestic device and a domestic chip.

The Electronic Cipher Book (ECB) mode and the cipher text block chaining (CBC) mode are two working modes of the block cipher, the electronic cipher book mode has the characteristics of simplicity in operation and easiness in implementation, and meanwhile, due to the independence of the blocks, the parallel processing is facilitated, and error propagation can be well prevented. The cipher text block linking mode links the encryption processes of all the blocks together, so that the cipher text of a certain block does not depend on the plain text of the block but depends on all the plain text blocks before (including) the block, and meanwhile, the operation of initial vector randomization is used in the encryption process, meanwhile, the correlation between the plain text blocks and the cipher text blocks is covered, and the safety is improved.

After the initial seed material is obtained, performing seed material derivation, wherein the seed material after derivation is used for updating the internal state of the random number generator, and the step of executing the derivation function can be as follows:

filling an initial seed material, wherein S = the byte number of the initial seed material | | | | derived seed material | | |0x80, the byte numbers of the initial seed material and the derived seed material are both 32 bit numbers, and the symbol | | | represents the connection of a bit string. When the bit length of the padded S is not a multiple of 128, continuing to pad 0x00 until the bit length of the padded S is a multiple of 128;

selecting a key 0x000102030405060708090A0B0C0D0E0F used in the SM4 CBC mode, then selecting A0-bit string with an initial vector IV of 0x00000000 and 96 bits connected, and connecting the IV with the S, namely: IVS = IV | | S. Encrypting the IVS in the CBC mode of the SM4 under the action of the key, and outputting a 128-bit MAC value as a key K in the ECB mode of the SM 4; the alternative initial vector IV is a 0-bit string of 0x00000001 concatenated with 96 bits, also concatenating IV with S, i.e.: IVSS = IV | | S. Under the action of the key, the IVSS is encrypted in the CBC mode of SM4, and the output 128-bit MAC value is used as the encrypted data X in the ECB mode of SM 4. Encrypting X in ECB mode of SM4 under the action of key K, and outputting 128-bit value

Is then encrypted

Outputting a 128-bit value

，

I.e. 256 bits of derivative seed material.

on the basis of the above embodiment, the step 4 specifically includes:

In specific implementation, after 256-bit derived seed materials seed are obtained, the internal states Key and V of the random number generator are further updated by the derived seed materials based on the current internal state, and the state updating function execution steps are as follows:

firstly, under the action of a current state Key value, an encrypted V +1 in an ECB mode of SM4 obtains a 128-bit output result output1;

secondly, under the action of the current state Key value, the encryption V +2 in the ECB mode of the SM4 obtains a 128-bit output result output2;

connecting output1 and output2, and then carrying out exclusive OR operation on the output1 and the output2 and a 256-bit derived seed key seed;

the first 128 bits of the result are used as the updated value of Key, and the last 128 bits of the result are used as the updated value of V.

Step 5, outputting a random number;

the step 5 specifically includes:

step 5.2, setting the target seed material as a 0-bit string with 256 bits;

In specific implementation, after the initialization of the random number generator is completed, the random number generator can output random numbers, the random number generator returns random numbers with required given length based on the current internal state, the random number output each time is 128 bits at most, the internal state of the random number generator is updated while the random numbers are output, and the execution steps of the random number output are as follows:

and judging whether the reseeding counter exceeds a reseeding interval or not, and if the reseeding interval is exceeded, executing reseeding operation, specifically, updating the state of the reseeding operation based on the current internal state. The execution steps are as follows:

firstly, 256 bits of initial seed materials are obtained from an entropy source;

deriving the initial seed material to obtain 256 bit derived seed materials, wherein the deriving step of the seed material deriving process is the same as the deriving function executing step of the initializing process;

and finally, updating the states of the derivative seed material and the current internal state Key and V to obtain the internal state of the new random number generator, wherein the state updating process is the same as the state updating function execution step of the initialization process.

If the interval is not exceeded, executing the next step, and setting the seed material as a0 bit string with 256 bits;

under the action of the current internal state Key value, encrypting V +1 of the current internal state in the ECB mode of SM4 to obtain a 128-bit output result output;

taking the previous requested _ number _ of _ bits of output as an output random number;

and updating the state of the seed material and the current internal state Key and V to obtain a new internal state Key and a new internal state V of the random number generator, and simultaneously recording the number of times of outputting the random number according to the value of the reseeding counter plus 1.

Since the state is updated every time the random number is output, it is difficult to infer the output of the random number in the next state from the current output of the random number without knowing the internal state, which reaches at least 128 bits of entropy.

In the random number generation method based on the SM4 counter mode provided in this embodiment, through five steps of initializing the random number generator based on the SM4 counter mode, acquiring an entropy source seed, deriving a seed based on the SM4, updating a state of the random number generator, and outputting a random number, the security of the bottom layer of the cryptographic algorithm is improved.

On the basis of the above-described embodiments,

corresponding to the above method embodiment, referring to fig. 4, the present disclosure also provides a random number generation system 40 based on an SM4 counter mode, including:

an initialization module 401, configured to initialize a random number generator, where the random number generator includes a bit string V, a bit string Key, and a reseed counter;

an obtaining module 402 for obtaining initial seed material from an entropy source;

a derivation module 403, configured to derive the initial seed material based on SM4 to obtain a derived seed material;

an update module 404 for updating the random number generator state with the derivative seed material;

an output module 405 for outputting a random number;

the output module 405 specifically includes:

step 5.2, setting the target seed material as a 0-bit string with 256 bits;

step 5.4, taking the previous requested _ number _ of _ bits of output as an output random number;

The system shown in fig. 4 may correspondingly execute the contents in the method embodiment, and details of parts not described in detail in this embodiment refer to the contents described in the method embodiment, which are not described again here.

Referring to fig. 5, an embodiment of the present disclosure also provides an electronic device 50, including: at least one processor and a memory communicatively coupled to the at least one processor. Wherein the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the random number generation method based on the SM4 counter mode in the foregoing method embodiments.

The disclosed embodiments also provide a non-transitory computer-readable storage medium storing computer instructions for causing the computer to execute the random number generation method based on the SM4 counter mode in the foregoing method embodiments.

The disclosed embodiments also provide a computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions that, when executed by a computer, cause the computer to perform the random number generation method based on the SM4 counter mode in the aforementioned method embodiments.

Referring now to FIG. 5, a schematic diagram of an electronic device 50 suitable for use in implementing embodiments of the present disclosure is shown. The electronic devices in the embodiments of the present disclosure may include, but are not limited to, mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), in-vehicle terminals (e.g., car navigation terminals), and the like, and fixed terminals such as digital TVs, desktop computers, and the like. The electronic device shown in fig. 5 is only an example, and should not bring any limitation to the functions and the scope of use of the embodiments of the present disclosure.

As shown in fig. 5, electronic device 50 may include a processing means (e.g., central processing unit, graphics processor, etc.) 501 that may perform various appropriate actions and processes in accordance with a program stored in a Read Only Memory (ROM) 502 or a program loaded from a storage means 508 into a Random Access Memory (RAM) 503. In the RAM 503, various programs and data necessary for the operation of the electronic apparatus 50 are also stored. The processing device 501, the ROM 502, and the RAM 503 are connected to each other through a bus 504. An input/output (I/O) interface 505 is also connected to bus 504.

Generally, the following devices may be connected to the I/O interface 505: input devices 506 including, for example, a touch screen, touch pad, keyboard, mouse, image sensor, microphone, accelerometer, gyroscope, etc.; output devices 507 including, for example, a Liquid Crystal Display (LCD), speakers, vibrators, and the like; storage devices 508 including, for example, magnetic tape, hard disk, etc.; and a communication device 509. The communication means 509 may allow the electronic device 50 to communicate with other devices wirelessly or by wire to exchange data. While the figures illustrate an electronic device 50 having various means, it is to be understood that not all illustrated means are required to be implemented or provided. More or fewer devices may alternatively be implemented or provided.

In particular, the processes described above with reference to the flow diagrams may be implemented as computer software programs, according to embodiments of the present disclosure. For example, embodiments of the present disclosure include a computer program product comprising a computer program embodied on a computer readable medium, the computer program comprising program code for performing the method illustrated in the flow chart. In such an embodiment, the computer program may be downloaded and installed from a network via the communication means 509, or installed from the storage means 508, or installed from the ROM 502. The computer program performs the above-described functions defined in the methods of the embodiments of the present disclosure when executed by the processing device 501.

It should be noted that the computer readable medium in the present disclosure can be a computer readable signal medium or a computer readable storage medium or any combination of the two. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples of the computer readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present disclosure, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. In contrast, in the present disclosure, a computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: electrical wires, optical cables, RF (radio frequency), etc., or any suitable combination of the foregoing.

The computer readable medium may be embodied in the electronic device; or may exist separately without being assembled into the electronic device.

The computer readable medium carries one or more programs which, when executed by the electronic device, cause the electronic device to perform the steps associated with the method embodiments.

Alternatively, the computer readable medium carries one or more programs which, when executed by the electronic device, enable the electronic device to perform the steps associated with the method embodiments.

Computer program code for carrying out operations for aspects of the present disclosure may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, smalltalk, C + +, and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider).

The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.

The units described in the embodiments of the present disclosure may be implemented by software or hardware.

It should be understood that portions of the present disclosure may be implemented in hardware, software, firmware, or a combination thereof.

The above description is only for the specific embodiments of the present disclosure, but the scope of the present disclosure is not limited thereto, and any changes or substitutions that can be easily conceived by those skilled in the art within the technical scope of the present disclosure should be covered within the scope of the present disclosure. Therefore, the protection scope of the present disclosure shall be subject to the protection scope of the claims.

Claims

1. A random number generation method based on SM4 counter mode is characterized by comprising the following steps:

step 1, initializing a random number generator, wherein the random number generator comprises a bit string V, a bit string Key and a reseed counter;

step 2, obtaining initial seed materials from an entropy source;

the step 4 specifically includes:

step 4.4, using the first 128 bits of the obtained result as the updated value of Key and the last 128 bits of the result as the updated value of V;

step 5, outputting a random number;

the step 5 specifically includes:

step 5.2, setting the target seed material as a 0-bit string with 256 bits;

step 5.3, based on the current internal state Key value, encrypting the V +1 of the current internal state in the ECB mode of the SM4 to obtain a 128-bit output result output;

and 5.5, updating the states of the target seed material and the current internal states Key and V to obtain a new internal state Key and a new internal state V of the random number generator, and recording the number of times of outputting the random number according to the value of the reseeding counter plus 1.

2. The method according to claim 1, wherein the step 2 specifically comprises:

3. The method according to claim 1, wherein the step 3 specifically comprises:

Is then encrypted

Outputting a 128-bit value

，

I.e. 256 bits of derived seed material.

4. A random number generation system based on an SM4 counter mode, comprising:

an acquisition module to acquire initial seed material from an entropy source;

a derivation module, configured to derive the initial seed material based on SM4 to obtain a derived seed material;

the update module specifically includes:

step 4.2, under the action of the current state Key value, encrypting V +2 in the SM4 ECB mode to obtain a 128-bit output result output2;

step 4.3, connecting output1 and output2, and then carrying out exclusive or operation on the obtained product and 256 bit derived seed materials;

step 4.4, using the first 128 bits of the obtained result as an updated value of Key and the last 128 bits of the result as an updated value of V;

the output module is used for outputting the random number;

the output module specifically comprises:

step 5.2, setting the target seed material as a 0-bit string with 256 bits;

5. An electronic device, characterized in that the electronic device comprises:

at least one processor; and (c) a second step of,

the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the random number generation method based on the SM4 counter mode of any one of the preceding claims 1-3.